awslabs / aws-streamer

Video Processing for AWS
Apache License 2.0
44 stars 9 forks source link

Unable to create Rotating Credential provider. Error status: 0x15000022 #23

Open Zoturi opened 11 months ago

Zoturi commented 11 months ago

I'm having an issue with the library not using credentials provided to the host by instance profile. I've tested that I have access to Kinesis Video Streams service from the host and the container that uses the library. This access is provided by the instance profile, but only way to get the stream to work with KVS is to have the credentials in environment variables. The documentation mentions "If you use AWS plug-in (e.g. KVS) outside of AWS environment.." but this does not apply to my case. The error I get is the same as in the topic:

2023-09-28 08:14:05 [140184709070848] INFO - User agent string: AWS-SDK-KVS-CPP-CLIENT/3.4.1 2023-09-28 08:14:05 [140184709070848] ERROR - Unable to create Rotating Credential provider. Error status: 0x15000022 INFO:awstreamer.gst_pipeline.stream_pipeline:(<enum GST_STATE_CHANGE_FAILURE of type Gst.StateChangeReturn>, state=<enum GST_STATE_NULL of type Gst.State>, pending=<enum GST_STATE_PLAYING of type Gst.State>) ERROR:awstreamer.gst_pipeline.stream_pipeline:Failed to set the pipeline to the playing state INFO:awstreamer.gst_pipeline.stream_client:None All done.

Thank you for the help.

Zoturi commented 11 months ago

No sure if this will works flawlessly, but I used boto3 to get the instance profile credentials. I would think this is not optimal security wise, but maybe Boto3 token handling should prevent the streaming from stopping/pausing/hanging up. Tried adding the code here, but the markup didn't work.

Zoturi commented 10 months ago

Yeah, I don't think this is a viable solution, as it seem the security token fails at some point. Would be great to get some info about the possible reason on why the instance profile is not working with the library, thanks!