aws codecommit credential-helper issue

0

Original issue: unable to access codecommit repos, returning 403 error. I am able to access it only when directly inputting credentials into the https string.

I am trying to troubleshot my aws cli credentials, but aws codecommit credential-helper get is not returning anything. I checked IAM permissions, reinstalled awscli, checked aws credentials.

klaz
已提问 2 个月前94 查看次数
3 回答
0

The following get-caller-identity command displays information about the IAM identity used to authenticate the request. The caller is an IAM user.

aws sts get-caller-identity

Example output:

{
    "UserId": "AIDASAMPLEUSERID",
    "Account": "123456789012",
    "Arn": "arn:aws:iam::123456789012:user/DevAdmin"
}

Ensure that the user DevAdmin has proper permission in the IAM policy (AWSCodeCommitPowerUser or another managed policy for CodeCommit access)

https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-https-unixes.html

profile picture
专家
已回答 2 个月前
  • I checked the permissions and I have AWSCodeCommitPowerUser assigned. aws sts get-caller-identity also returns the correct user

  • what does 'aws sts get-caller-identity' show ?

  • it outputs a json object with my UserId, Account, and Arn. I checked my user and it has admin permissions. aws codecommit list-repositories gets me the correct repository, but aws codecommit credential-helper get is not returning anything.

0

Did you create HTTPS Git credentials under iam user?

profile picture
已回答 2 个月前
  • Yes, I setup HTTPS Git credentials. Confirmed the user from aws configure.

0

Ensure that your Git repository configuration is set up to use the credential helper. You can do this by verifying the .git/config file within your repository:

[credential]
    helper = !aws codecommit credential-helper $@
    UseHttpPath = true

Try running the credential helper manually to see if it returns credentials:

aws codecommit credential-helper get

If this does not return anything, there might be an issue with your AWS CLI configuration or the credential helper itself.

Ensure that you are using the latest version of the AWS CLI, as updates might contain bug fixes and improvements:

aws --version

Enable debug logging for the AWS CLI to get more detailed output, which might help in identifying the issue:

aws codecommit credential-helper get --debug
profile picture
专家
已回答 2 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则