search

aws / aws-sdk

Landing page for the AWS SDKs on GitHub
https://aws.amazon.com/tools/
Other
71 stars 14 forks source link

start-live-tail on GovCloud: Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/" #809

Closed NeckBeardPrince closed 4 weeks ago

NeckBeardPrince commented 1 month ago

Describe the bug

When using aws logs start-live-tail on GovCloud gives an error in output.

Expected Behavior

image

Current Behavior

❯ aws logs start-live-tail  --log-group-identifiers arn:aws-us-gov:logs::us-gov-west-1:<account-id>:log-group/aws/aes/domains/<redacted>/application-logs

Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"

Reproduction Steps

Run command in CLI

Possible Solution

No response

Additional Information/Context

I even tried setting --endpoint-url https://logs.us-gov-west-1.amazonaws.com but even I get the same output Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"

I don't think that streaming-logs.us-gov-west-1.amazonaws.com is even a valid domain.

❯ dig streaming-logs.us-gov-west-1.amazonaws.com

; <<>> DiG 9.10.6 <<>> streaming-logs.us-gov-west-1.amazonaws.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11851
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;streaming-logs.us-gov-west-1.amazonaws.com. IN A

;; AUTHORITY SECTION:
us-gov-west-1.amazonaws.com. 5  IN  SOA dns-external-master.amazon.com. hostmaster.amazon.com. 2012084890 180 60 2592000 5

;; Query time: 40 msec
;; SERVER: 192.168.1.2#53(192.168.1.2)
;; WHEN: Wed Aug 07 09:01:47 CDT 2024
;; MSG SIZE  rcvd: 145

Where as a non-govcloud endpoint has DNS records.

❯ dig logs.us-gov-east-1.amazonaws.com

; <<>> DiG 9.10.6 <<>> logs.us-gov-east-1.amazonaws.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54376
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;logs.us-gov-east-1.amazonaws.com. IN   A

;; ANSWER SECTION:
logs.us-gov-east-1.amazonaws.com. 60 IN A   18.252.59.222
logs.us-gov-east-1.amazonaws.com. 60 IN A   18.252.58.4
logs.us-gov-east-1.amazonaws.com. 60 IN A   18.252.59.246

;; Query time: 57 msec
;; SERVER: 192.168.1.2#53(192.168.1.2)
;; WHEN: Wed Aug 07 09:03:00 CDT 2024
;; MSG SIZE  rcvd: 109

CLI version used

aws-cli/2.17.24 Python/3.11.9 Darwin/23.5.0 source/arm64

Environment details (OS name and version, etc.)

macOS 14.5 (23F79)

tim-finnigan commented 1 month ago

Thanks for reaching out. Based on the FIPS documentation (https://aws.amazon.com/compliance/fips/#FIPS_Endpoints_by_Service) it looks like logs.us-gov-west-1.amazonaws.com or logs.us-gov-east-1.amazonaws.com are the valid logs endpoints you could use. Here is the AWS CLI documentation on Endpoints: https://docs.aws.amazon.com/cli/v1/userguide/cli-configure-endpoints.html

Do you have any environment variables set that are changing the endpoints? If you're using --endpoint-url, that should override environment variables anyway. Can you share your debug logs (with any sensitive info redacted) by adding --debug to your CLI command? That should provide more insight into the behavior here. There may be some custom network configurations in your environment that are modifying the request.

NeckBeardPrince commented 1 month ago

Thanks for reaching out. Based on the FIPS documentation (https://aws.amazon.com/compliance/fips/#FIPS_Endpoints_by_Service) it looks like logs.us-gov-west-1.amazonaws.com or logs.us-gov-east-1.amazonaws.com are the valid logs endpoints you could use. Here is the AWS CLI documentation on Endpoints: https://docs.aws.amazon.com/cli/v1/userguide/cli-configure-endpoints.html

Do you have any environment variables set that are changing the endpoints? If you're using --endpoint-url, that should override environment variables anyway. Can you share your debug logs (with any sensitive info redacted) by adding --debug to your CLI command? That should provide more insight into the behavior here. There may be some custom network configurations in your environment that are modifying the request.

❯ env | grep AWS
AWS_SHARED_CREDENTIAL_FILE=/Users/<USER>/.aws/credentials
❯ aws logs start-live-tail --profile <REMOVED> --log-group-identifiers arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/<REMOVED>/application-logs --endpoint-url https://logs.us-gov-west-1.amazonaws.com --debug
❯ aws logs start-live-tail --profile <REMOVED> --log-group-identifiers arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/<REMOVED>/application-logs --endpoint-url https://logs.us-gov-west-1.amazonaws.com --debug

2024-08-12 15:48:15,933 - MainThread - awscli.clidriver - DEBUG - CLI version: aws-cli/2.17.27 Python/3.11.9 Darwin/23.5.0 source/arm64
2024-08-12 15:48:15,933 - MainThread - awscli.clidriver - DEBUG - Arguments entered to CLI: ['logs', 'start-live-tail', '--profile', '<REMOVED>', '--log-group-identifiers', 'arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/<REMOVED>/application-logs', '--endpoint-url', 'https://logs.us-gov-west-1.amazonaws.com', '--debug']
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_s3 at 0x1101eb240>
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_ddb at 0x107e66700>
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <bound method BasicCommand.add_command of <class 'awscli.customizations.configure.configure.ConfigureCommand'>>
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function change_name at 0x107dcb1a0>
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function change_name at 0x107df8860>
2024-08-12 15:48:15,941 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function alias_opsworks_cm at 0x1101fb2e0>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_history_commands at 0x107ec1760>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <bound method BasicCommand.add_command of <class 'awscli.customizations.devcommands.CLIDevCommand'>>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <function add_waiters at 0x1101fa2a0>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event building-command-table.main: calling handler <bound method AliasSubCommandInjector.on_building_command_table of <awscli.alias.AliasSubCommandInjector object at 0x1102d8890>>
2024-08-12 15:48:15,942 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/data/cli.json
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_types at 0x11012d120>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function no_sign_request at 0x11012d440>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_verify_ssl at 0x11012d3a0>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_cli_read_timeout at 0x11012d580>
2024-08-12 15:48:15,942 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <function resolve_cli_connect_timeout at 0x11012d4e0>
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event top-level-args-parsed: calling handler <built-in method update of dict object at 0x1102cd980>
2024-08-12 15:48:15,943 - MainThread - botocore.session - DEBUG - Setting config variable for profile to '<REMOVED>'
2024-08-12 15:48:15,943 - MainThread - awscli.clidriver - DEBUG - CLI version: aws-cli/2.17.27 Python/3.11.9 Darwin/23.5.0 source/arm64
2024-08-12 15:48:15,943 - MainThread - awscli.clidriver - DEBUG - Arguments entered to CLI: ['logs', 'start-live-tail', '--profile', '<REMOVED>', '--log-group-identifiers', 'arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/<REMOVED>/application-logs', '--endpoint-url', 'https://logs.us-gov-west-1.amazonaws.com', '--debug']
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function add_timestamp_parser at 0x1101ebc40>
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function register_uri_param_handler at 0x10767fe20>
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function add_binary_formatter at 0x110283b00>
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function no_pager_handler at 0x10754b240>
2024-08-12 15:48:15,943 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function inject_assume_role_provider_cache at 0x107693ce0>
2024-08-12 15:48:15,944 - MainThread - botocore.utils - DEBUG - IMDS ENDPOINT: http://169.254.169.254/
2024-08-12 15:48:15,948 - MainThread - botocore.credentials - DEBUG - Skipping environment variable credential check because profile name was explicitly set.
2024-08-12 15:48:15,948 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function attach_history_handler at 0x107ec0f40>
2024-08-12 15:48:15,948 - MainThread - botocore.hooks - DEBUG - Event session-initialized: calling handler <function inject_json_file_cache at 0x107e4e7a0>
2024-08-12 15:48:15,955 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/data/logs/2014-03-28/service-2.json
2024-08-12 15:48:15,961 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs: calling handler <function inject_tail_command at 0x110216a20>
2024-08-12 15:48:15,961 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs: calling handler <function inject_start_live_tail_command at 0x110214ea0>
2024-08-12 15:48:15,961 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs: calling handler <function add_waiters at 0x1101fa2a0>
2024-08-12 15:48:15,968 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs: calling handler <bound method AliasSubCommandInjector.on_building_command_table of <awscli.alias.AliasSubCommandInjector object at 0x1102d8890>>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs_start-live-tail: calling handler <function add_waiters at 0x1101fa2a0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event building-command-table.logs_start-live-tail: calling handler <bound method AliasSubCommandInjector.on_building_command_table of <awscli.alias.AliasSubCommandInjector object at 0x1102d8890>>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.custom.start-live-tail.log-group-identifiers: calling handler <awscli.paramfile.URIArgumentHandler object at 0x11030a8d0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.custom.start-live-tail: calling handler <awscli.argprocess.ParamShorthandParser object at 0x107584910>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.custom.start-live-tail.log-stream-names: calling handler <awscli.paramfile.URIArgumentHandler object at 0x11030a8d0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.custom.start-live-tail.log-stream-name-prefixes: calling handler <awscli.paramfile.URIArgumentHandler object at 0x11030a8d0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.custom.start-live-tail.log-event-filter-pattern: calling handler <awscli.paramfile.URIArgumentHandler object at 0x11030a8d0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event load-cli-arg.custom.start-live-tail.mode: calling handler <awscli.paramfile.URIArgumentHandler object at 0x11030a8d0>
2024-08-12 15:48:15,969 - MainThread - botocore.hooks - DEBUG - Event process-cli-arg.custom.start-live-tail: calling handler <awscli.argprocess.ParamShorthandParser object at 0x107584910>
2024-08-12 15:48:15,969 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role
2024-08-12 15:48:15,969 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: assume-role-with-web-identity
2024-08-12 15:48:15,969 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: sso
2024-08-12 15:48:15,969 - MainThread - botocore.credentials - DEBUG - Looking for credentials via: shared-credentials-file
2024-08-12 15:48:15,970 - MainThread - botocore.credentials - INFO - Found credentials in shared credentials file: ~/.aws/credentials
2024-08-12 15:48:15,970 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/data/endpoints.json
2024-08-12 15:48:15,977 - MainThread - botocore.hooks - DEBUG - Event choose-service-name: calling handler <function handle_service_name_alias at 0x106493ce0>
2024-08-12 15:48:15,985 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/data/logs/2014-03-28/endpoint-rule-set-1.json
2024-08-12 15:48:15,985 - MainThread - botocore.loaders - DEBUG - Loading JSON file: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/data/partitions.json
2024-08-12 15:48:15,985 - MainThread - botocore.hooks - DEBUG - Event creating-client-class.cloudwatch-logs: calling handler <function add_generate_presigned_url at 0x1063af1a0>
2024-08-12 15:48:15,987 - MainThread - botocore.endpoint - DEBUG - Setting logs timeout as (60, 60)
2024-08-12 15:48:15,987 - MainThread - botocore.hooks - DEBUG - Event provide-client-params.cloudwatch-logs.StartLiveTail: calling handler <function base64_decode_input_blobs at 0x110283ba0>
2024-08-12 15:48:15,987 - MainThread - botocore.hooks - DEBUG - Event before-parameter-build.cloudwatch-logs.StartLiveTail: calling handler <function generate_idempotent_uuid at 0x1064be160>
2024-08-12 15:48:15,988 - MainThread - botocore.regions - DEBUG - Calling endpoint provider with parameters: {'Region': 'us-gov-west-1', 'UseDualStack': False, 'UseFIPS': False, 'Endpoint': 'https://logs.us-gov-west-1.amazonaws.com'}
2024-08-12 15:48:15,988 - MainThread - botocore.regions - DEBUG - Endpoint provider result: https://logs.us-gov-west-1.amazonaws.com
2024-08-12 15:48:15,988 - MainThread - botocore.hooks - DEBUG - Event before-call.cloudwatch-logs.StartLiveTail: calling handler <function inject_api_version_header_if_needed at 0x1064bfc40>
2024-08-12 15:48:15,988 - MainThread - botocore.endpoint - DEBUG - Making request for OperationModel(name=StartLiveTail) with params: {'url_path': '/', 'query_string': '', 'method': 'POST', 'headers': {'X-Amz-Target': 'Logs_20140328.StartLiveTail', 'Content-Type': 'application/x-amz-json-1.1', 'User-Agent': 'aws-cli/2.17.27 md/awscrt#0.21.2 ua/2.0 os/macos#23.5.0 md/arch#arm64 lang/python#3.11.9 md/pyimpl#CPython cfg/retry-mode#standard md/installer#source md/prompt#off md/command#logs.start-live-tail'}, 'body': b'{"logGroupIdentifiers": ["arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/aws/<REMOVED>/application-logs"]}', 'host_prefix': 'streaming-', 'url': 'https://streaming-logs.us-gov-west-1.amazonaws.com/', 'context': {'client_region': 'us-gov-west-1', 'client_config': <botocore.config.Config object at 0x110ad2b90>, 'has_streaming_input': False, 'auth_type': None}}
2024-08-12 15:48:15,988 - MainThread - botocore.hooks - DEBUG - Event request-created.cloudwatch-logs.StartLiveTail: calling handler <bound method RequestSigner.handler of <botocore.signers.RequestSigner object at 0x110593e90>>
2024-08-12 15:48:15,988 - MainThread - botocore.hooks - DEBUG - Event choose-signer.cloudwatch-logs.StartLiveTail: calling handler <function set_operation_specific_signer at 0x1064be020>
2024-08-12 15:48:15,989 - MainThread - botocore.auth - DEBUG - Calculating signature using v4 auth.
2024-08-12 15:48:15,989 - MainThread - botocore.auth - DEBUG - CanonicalRequest:
POST
/

content-type:application/x-amz-json-1.1
host:streaming-logs.us-gov-west-1.amazonaws.com
x-amz-date:20240812T204815Z
x-amz-target:Logs_20140328.StartLiveTail

content-type;host;x-amz-date;x-amz-target
26df3d7e293d9fdfd5759b0ed892d2bde1672df6cc0a0f1c32a28d3410faff0e
2024-08-12 15:48:15,989 - MainThread - botocore.auth - DEBUG - StringToSign:
AWS4-HMAC-SHA256
20240812T204815Z
20240812/us-gov-west-1/logs/aws4_request
41c86e1ff0ad64c23d0428ad0129b81d3b58abf83c58aa3dbc20d56da3758ab8
2024-08-12 15:48:15,989 - MainThread - botocore.auth - DEBUG - Signature:
018a5108373b280b9d13d220cc9163542ca7f79fdb36ad2a193955f910b2c295
2024-08-12 15:48:15,989 - MainThread - botocore.endpoint - DEBUG - Sending http request: <AWSPreparedRequest stream_output=True, method=POST, url=https://streaming-logs.us-gov-west-1.amazonaws.com/, headers={'X-Amz-Target': b'Logs_20140328.StartLiveTail', 'Content-Type': b'application/x-amz-json-1.1', 'User-Agent': b'aws-cli/2.17.27 md/awscrt#0.21.2 ua/2.0 os/macos#23.5.0 md/arch#arm64 lang/python#3.11.9 md/pyimpl#CPython cfg/retry-mode#standard md/installer#source md/prompt#off md/command#logs.start-live-tail', 'X-Amz-Date': b'20240812T204815Z', 'Authorization': b'AWS4-HMAC-SHA256 Credential=<REMOVED>/20240812/us-gov-west-1/logs/aws4_request, SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=<REMOVED>', 'Content-Length': '128'}>
2024-08-12 15:48:15,989 - MainThread - botocore.httpsession - DEBUG - Certificate path: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/cacert.pem
2024-08-12 15:48:15,989 - MainThread - urllib3.connectionpool - DEBUG - Starting new HTTPS connection (1): streaming-logs.us-gov-west-1.amazonaws.com:443
2024-08-12 15:48:15,991 - MainThread - botocore.endpoint - DEBUG - Exception received when sending HTTP request.
Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/connection.py", line 72, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.9_1/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socket.py", line 962, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
socket.gaierror: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 448, in send
    urllib_response = conn.urlopen(
                      ^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 801, in urlopen
    retries = retries.increment(
              ^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/retry.py", line 527, in increment
    raise six.reraise(type(error), error, _stacktrace)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/packages/six.py", line 770, in reraise
    raise value
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 715, in urlopen
    httplib_response = self._make_request(
                       ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 1060, in _validate_conn
    conn.connect()
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 363, in connect
    self.sock = conn = self._new_conn()
                       ^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <botocore.awsrequest.AWSHTTPSConnection object at 0x110a90a10>: Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 198, in _do_get_response
    http_response = self._send(request)
                    ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 270, in _send
    return self.http_session.send(request)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 477, in send
    raise EndpointConnectionError(endpoint_url=request.url, error=e)
botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"
2024-08-12 15:48:15,994 - MainThread - botocore.hooks - DEBUG - Event needs-retry.cloudwatch-logs.StartLiveTail: calling handler <bound method RetryHandler.needs_retry of <botocore.retries.standard.RetryHandler object at 0x110adc3d0>>
2024-08-12 15:48:15,994 - MainThread - botocore.retries.standard - DEBUG - Retry needed, retrying request after delay of: 0.519415077587232
2024-08-12 15:48:15,994 - MainThread - botocore.endpoint - DEBUG - Response received to retry, sleeping for 0.519415077587232 seconds
2024-08-12 15:48:16,519 - MainThread - botocore.hooks - DEBUG - Event request-created.cloudwatch-logs.StartLiveTail: calling handler <bound method RequestSigner.handler of <botocore.signers.RequestSigner object at 0x110593e90>>
2024-08-12 15:48:16,519 - MainThread - botocore.hooks - DEBUG - Event choose-signer.cloudwatch-logs.StartLiveTail: calling handler <function set_operation_specific_signer at 0x1064be020>
2024-08-12 15:48:16,519 - MainThread - botocore.auth - DEBUG - Calculating signature using v4 auth.
2024-08-12 15:48:16,519 - MainThread - botocore.auth - DEBUG - CanonicalRequest:
POST
/

content-type:application/x-amz-json-1.1
host:streaming-logs.us-gov-west-1.amazonaws.com
x-amz-date:20240812T204816Z
x-amz-target:Logs_20140328.StartLiveTail

content-type;host;x-amz-date;x-amz-target
26df3d7e293d9fdfd5759b0ed892d2bde1672df6cc0a0f1c32a28d3410faff0e
2024-08-12 15:48:16,519 - MainThread - botocore.auth - DEBUG - StringToSign:
AWS4-HMAC-SHA256
20240812T204816Z
20240812/us-gov-west-1/logs/aws4_request
9a68d9dcd8abe05b0bcb9dee2037461a36412b2945524ce2f85155eba73af500
2024-08-12 15:48:16,520 - MainThread - botocore.auth - DEBUG - Signature:
7047487ec24629a62dc49324f8b9f9a7846676c463d9dc7d3beaf284e4db3b22
2024-08-12 15:48:16,520 - MainThread - botocore.endpoint - DEBUG - Sending http request: <AWSPreparedRequest stream_output=True, method=POST, url=https://streaming-logs.us-gov-west-1.amazonaws.com/, headers={'X-Amz-Target': b'Logs_20140328.StartLiveTail', 'Content-Type': b'application/x-amz-json-1.1', 'User-Agent': b'aws-cli/2.17.27 md/awscrt#0.21.2 ua/2.0 os/macos#23.5.0 md/arch#arm64 lang/python#3.11.9 md/pyimpl#CPython cfg/retry-mode#standard md/installer#source md/prompt#off md/command#logs.start-live-tail', 'X-Amz-Date': b'20240812T204816Z', 'Authorization': b'AWS4-HMAC-SHA256 Credential=<REMOVED>/20240812/us-gov-west-1/logs/aws4_request, SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=<REMOVED>', 'Content-Length': '128'}>
2024-08-12 15:48:16,520 - MainThread - botocore.httpsession - DEBUG - Certificate path: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/cacert.pem
2024-08-12 15:48:16,520 - MainThread - urllib3.connectionpool - DEBUG - Starting new HTTPS connection (2): streaming-logs.us-gov-west-1.amazonaws.com:443
2024-08-12 15:48:16,522 - MainThread - botocore.endpoint - DEBUG - Exception received when sending HTTP request.
Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/connection.py", line 72, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.9_1/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socket.py", line 962, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
socket.gaierror: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 448, in send
    urllib_response = conn.urlopen(
                      ^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 801, in urlopen
    retries = retries.increment(
              ^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/retry.py", line 527, in increment
    raise six.reraise(type(error), error, _stacktrace)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/packages/six.py", line 770, in reraise
    raise value
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 715, in urlopen
    httplib_response = self._make_request(
                       ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 1060, in _validate_conn
    conn.connect()
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 363, in connect
    self.sock = conn = self._new_conn()
                       ^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <botocore.awsrequest.AWSHTTPSConnection object at 0x110b37250>: Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 198, in _do_get_response
    http_response = self._send(request)
                    ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 270, in _send
    return self.http_session.send(request)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 477, in send
    raise EndpointConnectionError(endpoint_url=request.url, error=e)
botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"
2024-08-12 15:48:16,524 - MainThread - botocore.hooks - DEBUG - Event needs-retry.cloudwatch-logs.StartLiveTail: calling handler <bound method RetryHandler.needs_retry of <botocore.retries.standard.RetryHandler object at 0x110adc3d0>>
2024-08-12 15:48:16,524 - MainThread - botocore.retries.standard - DEBUG - Retry needed, retrying request after delay of: 1.1001973810115884
2024-08-12 15:48:16,524 - MainThread - botocore.endpoint - DEBUG - Response received to retry, sleeping for 1.1001973810115884 seconds
2024-08-12 15:48:17,629 - MainThread - botocore.hooks - DEBUG - Event request-created.cloudwatch-logs.StartLiveTail: calling handler <bound method RequestSigner.handler of <botocore.signers.RequestSigner object at 0x110593e90>>
2024-08-12 15:48:17,630 - MainThread - botocore.hooks - DEBUG - Event choose-signer.cloudwatch-logs.StartLiveTail: calling handler <function set_operation_specific_signer at 0x1064be020>
2024-08-12 15:48:17,630 - MainThread - botocore.auth - DEBUG - Calculating signature using v4 auth.
2024-08-12 15:48:17,630 - MainThread - botocore.auth - DEBUG - CanonicalRequest:
POST
/

content-type:application/x-amz-json-1.1
host:streaming-logs.us-gov-west-1.amazonaws.com
x-amz-date:20240812T204817Z
x-amz-target:Logs_20140328.StartLiveTail

content-type;host;x-amz-date;x-amz-target
26df3d7e293d9fdfd5759b0ed892d2bde1672df6cc0a0f1c32a28d3410faff0e
2024-08-12 15:48:17,630 - MainThread - botocore.auth - DEBUG - StringToSign:
AWS4-HMAC-SHA256
20240812T204817Z
20240812/us-gov-west-1/logs/aws4_request
357085edfab8c3556fee899892b692aa6cd9af407fb125f81d7361986403afe9
2024-08-12 15:48:17,630 - MainThread - botocore.auth - DEBUG - Signature:
f752f5f9e7a48e999d95891380b1bb2a6da0220b5c293b008b5a5b18405d1cae
2024-08-12 15:48:17,630 - MainThread - botocore.endpoint - DEBUG - Sending http request: <AWSPreparedRequest stream_output=True, method=POST, url=https://streaming-logs.us-gov-west-1.amazonaws.com/, headers={'X-Amz-Target': b'Logs_20140328.StartLiveTail', 'Content-Type': b'application/x-amz-json-1.1', 'User-Agent': b'aws-cli/2.17.27 md/awscrt#0.21.2 ua/2.0 os/macos#23.5.0 md/arch#arm64 lang/python#3.11.9 md/pyimpl#CPython cfg/retry-mode#standard md/installer#source md/prompt#off md/command#logs.start-live-tail', 'X-Amz-Date': b'20240812T204817Z', 'Authorization': b'AWS4-HMAC-SHA256 Credential=<REMOVED>/20240812/us-gov-west-1/logs/aws4_request, SignedHeaders=content-type;host;x-amz-date;x-amz-target, Signature=<REMOVED>', 'Content-Length': '128'}>
2024-08-12 15:48:17,631 - MainThread - botocore.httpsession - DEBUG - Certificate path: /opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/cacert.pem
2024-08-12 15:48:17,631 - MainThread - urllib3.connectionpool - DEBUG - Starting new HTTPS connection (3): streaming-logs.us-gov-west-1.amazonaws.com:443
2024-08-12 15:48:17,633 - MainThread - botocore.endpoint - DEBUG - Exception received when sending HTTP request.
Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/connection.py", line 72, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.9_1/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socket.py", line 962, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
socket.gaierror: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 448, in send
    urllib_response = conn.urlopen(
                      ^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 801, in urlopen
    retries = retries.increment(
              ^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/retry.py", line 527, in increment
    raise six.reraise(type(error), error, _stacktrace)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/packages/six.py", line 770, in reraise
    raise value
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 715, in urlopen
    httplib_response = self._make_request(
                       ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 1060, in _validate_conn
    conn.connect()
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 363, in connect
    self.sock = conn = self._new_conn()
                       ^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <botocore.awsrequest.AWSHTTPSConnection object at 0x110b58590>: Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 198, in _do_get_response
    http_response = self._send(request)
                    ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 270, in _send
    return self.http_session.send(request)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 477, in send
    raise EndpointConnectionError(endpoint_url=request.url, error=e)
botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"
2024-08-12 15:48:17,634 - MainThread - botocore.hooks - DEBUG - Event needs-retry.cloudwatch-logs.StartLiveTail: calling handler <bound method RetryHandler.needs_retry of <botocore.retries.standard.RetryHandler object at 0x110adc3d0>>
2024-08-12 15:48:17,634 - MainThread - botocore.retries.standard - DEBUG - Max attempts of 3 reached.
2024-08-12 15:48:17,634 - MainThread - botocore.retries.standard - DEBUG - Not retrying request.
2024-08-12 15:48:17,634 - MainThread - awscli.clidriver - DEBUG - Exception caught in main()
Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/connection.py", line 72, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.9_1/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socket.py", line 962, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
socket.gaierror: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 448, in send
    urllib_response = conn.urlopen(
                      ^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 801, in urlopen
    retries = retries.increment(
              ^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/util/retry.py", line 527, in increment
    raise six.reraise(type(error), error, _stacktrace)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/packages/six.py", line 770, in reraise
    raise value
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 715, in urlopen
    httplib_response = self._make_request(
                       ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connectionpool.py", line 1060, in _validate_conn
    conn.connect()
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 363, in connect
    self.sock = conn = self._new_conn()
                       ^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <botocore.awsrequest.AWSHTTPSConnection object at 0x110b58590>: Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/clidriver.py", line 499, in main
    return command_table[parsed_args.command](remaining, parsed_args)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/clidriver.py", line 634, in __call__
    return command_table[parsed_args.operation](remaining, parsed_globals)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/customizations/commands.py", line 206, in __call__
    rc = self._run_main(parsed_args, parsed_globals)
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/customizations/logs/startlivetail.py", line 970, in _run_main
    response = self._client.start_live_tail(**start_live_tail_kwargs)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/client.py", line 360, in _api_call
    return self._make_api_call(operation_name, kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/client.py", line 725, in _make_api_call
    http, parsed_response = self._make_request(
                            ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/client.py", line 745, in _make_request
    return self._endpoint.make_request(operation_model, request_dict)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 100, in make_request
    return self._send_request(request_dict, operation_model)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 154, in _send_request
    raise exception
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 198, in _do_get_response
    http_response = self._send(request)
                    ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/endpoint.py", line 270, in _send
    return self.http_session.send(request)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/awscli/2.17.27/libexec/lib/python3.11/site-packages/awscli/botocore/httpsession.py", line 477, in send
    raise EndpointConnectionError(endpoint_url=request.url, error=e)
botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"

Could not connect to the endpoint URL: "https://streaming-logs.us-gov-west-1.amazonaws.com/"
NeckBeardPrince commented 1 month ago

@tim-finnigan Here is something interesting I just found out

> aws logs start-live-tail --profile <REMOVED> --log-group-identifiers arn:aws-us-gov:logs::us-gov-west-1:<REMOVED>:log-group/<REMOVED>/application-logs --endpoint-url https://chicken-feet.us-gov-west-1.amazonaws.com

Could not connect to the endpoint URL: "https://streaming-chicken-feet.us-gov-west-1.amazonaws.com/"

Looks like when using --endpoint no matter what you give it, the CLI always streaming- to the endpoint.

tim-finnigan commented 1 month ago

In your logs it looks like that is added as a host_prefix: ('host_prefix': 'streaming-'). Linking related feature request to allow option to disable host prefix injection: https://github.com/aws/aws-cli/issues/6898

NeckBeardPrince commented 1 month ago

In your logs it looks like that is added as a host_prefix: ('host_prefix': 'streaming-'). Linking related feature request to allow option to disable host prefix injection: aws/aws-cli#6898

2022? Nice.

lol so this feature has been completely broken for at least two years?

tim-finnigan commented 1 month ago

@NeckBeardPrince in this case the issue actually appears to be with the hostPrefix modeled here for the StartLiveTail API endpoint. We will reach out to the CloudWatch Logs team regarding having the hostPrefix set to streaming- and whether that endpoint should be supported. Thanks for bringing this to our attention.

jsicheng commented 1 month ago

@NeckBeardPrince @tim-finnigan the hostPrefix is correct. The LiveTail feature is currently only supported in commercial regions: https://aws.amazon.com/about-aws/whats-new/2023/06/live-tail-amazon-cloudwatch-logs/.

NeckBeardPrince commented 1 month ago

@NeckBeardPrince @tim-finnigan the hostPrefix is correct. The LiveTail feature is currently only supported in commercial regions: https://aws.amazon.com/about-aws/whats-new/2023/06/live-tail-amazon-cloudwatch-logs/.

That difference should be added here and the CloudWatch Logs docs should also explain that. The error could be improved as well to make it more clear.

jsicheng commented 1 month ago

Absolutely! We are taking note of this and will update the docs/error accordingly. Thank you for bringing this to our attention.

NeckBeardPrince commented 1 month ago

Wait, what was completed? Why the closed-for-staleness label?

tim-finnigan commented 1 month ago

This is an issue with the CloudWatch Logs API and not the AWS CLI directly. The service team acknowledged that the docs/error message will be updated — we can transfer to our cross-SDK repository for further tracking, since APIs like StartLiveTail are used across AWS SDKs in addition to the CLI. @jsicheng please let us know if you have any updates on your end.

jsicheng commented 1 month ago

The documentation here and here have been updated. Updating the error code might not be possible at this time. Let me know if you need anything else.

tim-finnigan commented 4 weeks ago

The documentation here and here have been updated. Updating the error code might not be possible at this time. Let me know if you need anything else.

Thanks for sharing the update. I'm going to close this for tracking from our end then, since documentation updates were made and there are not plans to update the error code as this time.

github-actions[bot] commented 4 weeks ago

This issue is now closed.

Comments on closed issues are hard for our team to see. If you need more assistance, please either tag a team member or open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.