--profile does not correctly use credential_process (Appstream) #389
Description
Mountpoint for Amazon S3 version
mountpoint-s3 0.3.0-d0ef0b9
AWS Region
us-west-2
Describe the running environment
Trying to mount S3 bucket in Appstream using IAM Profile
I get an error.
Command:
mount-s3 --read-only --allow-other --profile appstream_machine_role --region us-west-2 -f BUCKET_NAME /mnt/
What happened?
Error:
Caused by:
0: HeadBucket failed for bucket BUCKET_NAME in region us-west-2
1: Client error
2: Unknown response error: MetaRequestResult { response_status: 0, crt_error: Error(6146, "aws-c-auth: AWS_AUTH_SIGNING_NO_CREDENTIALS, Attempt to sign an http request without credentials"), error_response_headers: None, error_response_body: None }
Relevant log output
2023-07-18T18:37:05.280819Z DEBUG awscrt::AWSProfile: Creating profile collection from file at "/home/ImageBuilderAdmin/.aws/config"
2023-07-18T18:37:05.280877Z TRACE awscrt::AWSProfile: Parsing aws profile line in profile "<None>", current property: "<None>"
2023-07-18T18:37:05.280927Z TRACE awscrt::AWSProfile: Parsing aws profile line in profile "appstream_machine_role", current property: "<None>"
2023-07-18T18:37:05.280963Z DEBUG awscrt::AuthCredentialsProvider: (id=0x561d1bb35cd0) Profile credentials provider successfully built config profile collection from file at (/home/ImageBuilderAdmin/.aws/config)
2023-07-18T18:37:05.280994Z DEBUG awscrt::AWSProfile: Creating profile collection from file at "/home/ImageBuilderAdmin/.aws/credentials"
2023-07-18T18:37:05.281042Z TRACE awscrt::AWSProfile: Parsing aws profile line in profile "<None>", current property: "<None>"
2023-07-18T18:37:05.281077Z WARN awscrt::AWSProfile: Profile declarations in credentials files are not allowed to begin with the "profile" keyword
2023-07-18T18:37:05.281109Z WARN awscrt::AWSProfile: Profile Parse context:
Source File:/home/ImageBuilderAdmin/.aws/credentials
Line: 1
Current Profile: <None>
Current Property: <None>
2023-07-18T18:37:05.281140Z TRACE awscrt::AWSProfile: Parsing aws profile line in profile "<None>", current property: "<None>"
2023-07-18T18:37:05.281171Z WARN awscrt::AWSProfile: Property definition seen outside a profile
2023-07-18T18:37:05.281200Z WARN awscrt::AWSProfile: Profile Parse context:
Source File:/home/ImageBuilderAdmin/.aws/credentials
Line: 2
Current Profile: <None>
Current Property: <None>
2023-07-18T18:37:05.281233Z DEBUG awscrt::AuthCredentialsProvider: (id=0x561d1bb35cd0) Profile credentials provider successfully built credentials profile collection from file at (/home/ImageBuilderAdmin/.aws/credentials)
2023-07-18T18:37:05.281268Z WARN awscrt::AWSProfile: property "credential_process" has value "" replaced during merge
2023-07-18T18:37:05.281301Z INFO awscrt::AuthCredentialsProvider: (id=0x561d1bb35cd0) Profile credentials provider attempting to pull credentials from profile "appstream_machine_role"
2023-07-18T18:37:05.281335Z ERROR awscrt::AuthSigning: (id=0x7f9fc4000ba0) Credentials Provider failed to source credentials with error 2049(aws-c-http: AWS_ERROR_HTTP_HEADER_NOT_FOUND, The specified header was not found)
2023-07-18T18:37:05.281368Z ERROR awscrt::S3MetaRequest: id=0x561d1ba71d20 Meta request could not sign HTTP request due to error code 6146 (Attempt to sign an http request without credentials)
2023-07-18T18:37:05.281399Z ERROR awscrt::S3MetaRequest: id=0x561d1ba71d20 Could not prepare request 0x7f9fcc001790 due to error 6146 (Attempt to sign an http request without credentials).