pulumi / pulumi-aws

An Amazon Web Services (AWS) Pulumi resource package, providing multi-language access to AWS
Apache License 2.0
449 stars 155 forks source link

AWS IAM and other services don´t work anymore (TLS issue) #4573

Open timlukastlt opened 8 hours ago

timlukastlt commented 8 hours ago

Describe what happened

Pulumi is attempting to make a request to iam.amazonaws.com but uses TLS 1.0. Since AWS only supports higher versions of TLS, the request is blocked, as shown in the image below: Image

For sts as an example the requests from Pulumi are working because is uses TLS3. Image

Sample program


import pulumi
import pulumi_aws as aws

example = aws.iam.get_role(name="example-iam-role")

Log output

The programm just shows creating... for one hour (55-65 minutes) After that it shows that the connection to iam.amazonaws.com was not possible.

Affected Resource(s)

We got this error for iam

Output of pulumi about

CLI         
Version     3.134.1
Go Version   go1.23.1
Go Compiler  gc

Plugins
KIND      NAME    VERSION
resource  aws     6.53.0
language  python  unknown

Host    
OS       debian
Version  12.7
Arch     x86_64

This project is written in python: executable='/app/venv/bin/python' version='3.9.20'

Backend       
Name           3fd5c982165b
URL            s3://our-bucket/test123
User           root
Organizations 
Token type     personal

Dependencies:
NAME        VERSION
pip         23.0.1
pulumi_aws  6.53.0
setuptools  58.1.0

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).