RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
BSD 3-Clause "New" or "Revised" License
2.98k stars 624 forks source link

Update SQS Flag Shop Terraform #277

Closed andrew-aiken closed 1 week ago

andrew-aiken commented 3 weeks ago

Overview of Changes

Testing

Deployed with a newer version of Terraform (1.9.2) Confirmed scenario plays out as intended

andrew-aiken commented 3 weeks ago

@TeneBrae93 @jdearmas Could you review the changes

jdearmas commented 1 week ago

Hey @andrew-aiken,

Thanks for the pull request. It looks great. I just tried it out, but I get the following error after assuming the role:

$ aws --profile sqs_send_role sts get-caller-identity

An error occurred (InvalidClientTokenId) when calling the GetCallerIdentity operation: The security token included in the request is invalid.

Do you see this on your end?

andrew-aiken commented 1 week ago

@jdearmas Works as expected on my side (exporting the creds to env vars)

Based on the error it looks like you might now have copied the id/key/token correctly

jdearmas commented 1 week ago

@andrew-aiken,

Thank you very much for taking the time to contribute and help improve cloudgoat!