search

aliyun / acr-login

Apache License 2.0
37 stars 8 forks source link

Getting /tokens with RAM user failed with 404 USER_NOT_EXIST error #19

Open yousong opened 1 year ago

yousong commented 1 year ago

I was experimenting with aliyun command line client against cr Personal Edition. It seems the aliyun cr GetAuthorizationToken command only supports 2016-06-07 API for now

image

Invoking aliyun --access-key-id "$ak" --access-key-secret "$sk" --region cn-beijing cr GetAuthorizationToken will fail with the following error, with http status code being 404 (req id: 77C730C7-CE62-51FD-AC39-2658DCF9EE05). The aksk was for a RAM user with AdministratorAccess role policy.

image

Same command but with access key created from "AccessKey Management" works just fine.

My end goal is to use aksk from a RAM user with only permission to access specified repo. Aksk from "AccessKey Management" does not pertain to the least permission security practice.

image

yousong commented 1 year ago

Likely a similar issue with https://github.com/aliyun/acr-login/issues/15

itrethan commented 1 year ago

I am facing the same issue. sub account key with full cr access failed but master key works. Please fix asap