[Enhancement]: Perform decode-authorization-message when the EC2 error is an encoded authorization message

[johann8384]

Description

When an operation results in an encoded error message, prior to printing the encoded message, attempt to call sts decode-authorization-message to provide the decoded result to the user.

╷ │ Error: creating EC2 Instance: UnauthorizedOperation: You are not authorized to perform this operation. Encoded authorization failure message: <ENCODED MESSAGE> │ status code: 403, request id: 1550870c-6e0b-4fac-ba19-1da46fef7f17

Affected Resource(s) and/or Data Source(s)

aws_instance

Potential Terraform Configuration

No response

References

https://docs.aws.amazon.com/cli/latest/reference/sts/decode-authorization-message.html

Would you like to implement a fix?

Yes

[github-actions[bot]]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[Gonveliz]

I have the same problem. Could you solve it?

[Gonveliz]

I have the same problem. Could you solve it?

I'm using GHA with self-hosted runners

[jpriebe]

We are using gitlab pipelines, and we have a fairly elaborate setup of cross-account IAM that allows our pipelines to run in dozens of different accounts. End users do not have access to the roles used by the pipelines, so they don't have a way to decode the messages.

It would be great if this could be an option set in the aws provider to decode or not decode these encrypted auth messages.

[Forte-RehamAdel]

@jpriebe Please, did you find the solution because I have the same problem?