2023-11-02 aws | Clojure Slack Archive

aws

cal 2023-11-02T23:38:03.728709Z

Hi! I’m running on EKS. Isn’t aws-api supposed to just pick up my instance role? Or must I do something special? Amazonica seems to work fine

# Using:
# com.cognitect.aws/api       {:mvn/version "0.8.686"}
# com.cognitect.aws/endpoints {:mvn/version "1.1.12.504"}

{
  "cognitect.anomalies/category": "cognitect.anomalies/fault",
  "cognitect.anomalies/message": "Unable to fetch credentials. See log for more details."
}

(I verified that my instance role is reasonable, by having my Clojure program call IMDSv2) BTW it printed nothing to the k8s pod’s logs…

scottbale 2023-11-03T20:21:44.305329Z

This sounds like the same issue as https://github.com/cognitect-labs/aws-api/issues/243. tl;dr - aws-api does not (yet) support IMDSv2. If so, then yeah we're aware of it but don't have a timetable on a fix yet. Sorry, I wish I had a better answer for you.

cal 2023-11-03T20:32:22.702809Z

Ahhh thanks! I suppose pull requests aren’t desired?

scottbale 2023-11-03T20:36:45.337749Z

Yeah - not that they're not desired, but we just don't have a policy and process in place currently to accept them. (Personally I hope we change that soon.)

👍 1

cal 2023-11-04T01:35:15.173079Z

Could I simply create a cognitect.aws.credentials/CredentialsProvider that handles IMDSv2? (That’s my understanding of the https://github.com/cognitect-labs/aws-api/blob/main/examples/assume_role_example.clj mentioned in the readme)

cal 2023-11-04T03:24:34.779549Z

I coded it up & will test tomorrow on amazon linux 2023

scottbale 2023-11-04T22:11:56.007799Z

> Could I simply create a cognitect.aws.credentials/CredentialsProvider that handles IMDSv2? I believe that's what is required, yes.

cal 2023-11-05T02:46:31.769439Z

Hokie dokie, for anyone hit by the aws-api problem under Amazon Linux 2023, here’s a wee workaround: https://github.com/cognitect-labs/aws-api/issues/243#issuecomment-1793615398

Clojurians Log v2

aws