No credentials could be found from valid profile using ProfileConfigFileAWSCredentialsProvider

[RoyZhang2022]

Hi,

I am using Aws::Auth::ProfileConfigFileAWSCredentialsProvider() with specified profile to access AWS service. But I found the credentials is always empty. The credentials I used is valid as it could work if I put it under my $HOME/.aws/credentials. I did not set AWS_SHARED_CREDENTIALS_FILE and AWS_PROFILE. I am not sure what is wrong. Or my profile format is not correct? I am using on Windows 10 Pro with AWS SDK 1.9.220

--code

   Aws::Auth::ProfileConfigFileAWSCredentialsProvider credProvider(
        profile);
    credentials = credProvider.GetAWSCredentials();

    if (credentials.IsExpiredOrEmpty()) {
      std::stringstream ss;

      ss << "No credentials in profile " << profile
         << " or they are expired";

      LOG_ERROR_MSG(ss.str());
      Close();
      return false;
    }

--the profile I passed
"{[default]\n aws_access_key_id=xxxxxxxxxxxx\n aws_secret_access_key=xxxxxxxxxxxxxxxx\n}";

--aws log with Debug level, to test profile I removed C:\Users\zhang.aws\credentials
[INFO] 2022-08-29 20:44:17.012 ProfileConfigFileAWSCredentialsProvider [9076] Setting provider to read credentials from C:\Users\zhang.aws\credentials for credentials file and C:\Users\zhang.aws\config for the config file , for use with profile [default]
aws_access_key_id=xxxxxxxxxxxxxxxxx
aws_secret_access_key=xxxxxxxxxxxxxxxxxxxxxxxxx

[INFO] 2022-08-29 20:44:17.012 Aws::Config::AWSConfigFileProfileConfigLoader [9076] Unable to open config file C:\Users\zhang.aws\credentials for reading.

[SergeyRyabinin]

Hi Roy,
Thanks for bringing this question.

First of all, I have updated profile and credential file parsing recently, starting with 1.9.335. It brings a better compatibility support with different AWS SDK language clients.
We (CPP SDK) still lack multi-line property support (it is not your case, I'm mentioning it just in case).

• Could you please check if your issue is reproducible with my latest changes? (I guess you should observe the same behavior as I did not change file loading from the disk, mostly parsing).

Secondly, in your message I see following:

$HOME/.aws/credentials
Setting provider to read credentials from C:\Users\zhang.aws\credentials for credentials file and C:\Users\zhang.aws\config

You can check how SDK fetches your %userprofile% dir on Windows: FileSystem.cpp. From MS docs, GetUserProfileDirectoryW does not set the last backslash, but SDK has a logic to append it anyway.

• I suppose a slash or backslash has been lost somewhere. I suggest to check that environment variables USERPROFILE, AWS_CONFIG_FILE and AWS_SHARED_CREDENTIALS_FILE are either not set or set to a correct locations.
  (USERPROFILE if set has to point to C:\Users\zhang, AWS_SHARED_CREDENTIALS_FILE if set has to point to C:\Users\zhang\.aws\credentials in your case).

If the issue is still reproducible with the latest changes and correct or not set env variables, we'll be glad to investigate it further.

Best regards,
Sergey

[RoyZhang2022]

Hi Sergey,

Thanks for your quick reply!

The "" is not missed. It should be a display issue. I copied again here.

[DEBUG] 2022-08-29 20:44:17.012 FileSystem [9076] Environment value for variable USERPROFILE is C:\Users\zhang
[INFO] 2022-08-29 20:44:17.012 ProfileConfigFileAWSCredentialsProvider [9076] Setting provider to read credentials from C:\Users\zhang.aws\credentials for credentials file and C:\Users\zhang.aws\config for the config file , for use with profile [default]
.......

Let me try the newest version.

Regards,
Roy

[RoyZhang2022]

Hi Sergey,

I have figured out the root cause. It is my problem. The profile should be the profile section name like default1 or default2, instead of the while profile string.

[default1]
aws_access_key_id=xxxxxxxxxxxxxxxxx
aws_secret_access_key=xxxxxxxxxxxxxxxxxxxxxxxxx

[default2]
aws_access_key_id=xxxxxxxxxxxxxxxxx
aws_secret_access_key=xxxxxxxxxxxxxxxxxxxxxxxxx

The SDK description here is correct. But if it has an example that will be helpful. As the profile is easy to be understood as a profile file name. I tried a file name, then tried a profile string before I used the profile name. I used one day to figure out this.

https://sdk.amazonaws.com/cpp/api/LATEST/class_aws_1_1_auth_1_1_profile_config_file_a_w_s_credentials_provider.html#a10a83c94575913d33d3aac45dfabd2b3

Regards,
Roy

[SergeyRyabinin]

Hi Roy,
I'm glad you figured it out! (I'm also glad we don't have an issue in a file loading logic!)
I have sent your feedback to the documentation writers.
I will also update the doxygen generated comment here too.
Best regards,
Sergey

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.