Getting Access Denied error

[avinash-gudagi]

I'm currently using logstash 5.6.1 version and logstash-cloudtrail-codec-3.0.0 version but I'm getting this error that I don't seem to understand

[ERROR] 2018-01-11 00:24:05.705 [[main]<s3] pipeline - A plugin had an unrecoverable error. Will restart this plugin. Plugin: <LogStash::Inputs::S3 access_key_id=>"XXX", bucket=>"cloudtrail.cimsprd", region=>"us-east-1", secret_access_key=>"XXX", prefix=>"AWSLogs/072478573200/CloudTrail/", type=>"np", exclude_pattern=>".\/CloudTrail\-Digest\/.", add_field=>{"source"=>"gzfiles"}, codec=><LogStash::Codecs::CloudTrail id=>"084358194712e162546210adf13d763cd90d870f-1", enable_metric=>true, charset=>"UTF-8">, id=>"084358194712e162546210adf13d763cd90d870f-2", enable_metric=>true, delete=>false, interval=>60, temporary_directory=>"/tmp/logstash">

Error: Access Denied

I don't seem to understand this access denied message.

Can you please help me in this regard.

Avinash

• Version: 5.6.1
• Operating System: Ubuntu 16.04
• Config File:

input { s3 { access_key_id => "xxxx" bucket => "xxxx" region => "us-east-1" secret_access_key => "xxxx" prefix => "AWSLogs/xxxx/CloudTrail/" type => "np" exclude_pattern => ".\/CloudTrail-Digest\/." add_field => { source => gzfiles } codec => cloudtrail {} } }

filter { mutate { replace => [ "xxxxx", "cims-prd" ] } }

output { elasticsearch { hosts =>["xxxx"] user => "xxxx" password => "xxxx" ssl => true index => "ctrail-%{type}-%{+YYYY.MM}" } }

[morganchristiansson]

The error is from the logstash-input-s3 plugin because your accesss credentials are not valid.

The error is not from logstash-codec-cloudtrail