santthosh / aws-es-kibana

AWS ElasticSearch Kibana Proxy
Apache License 2.0
323 stars 133 forks source link

Not Working with AWS IAM Roles #29

Closed markusbecker closed 6 years ago

markusbecker commented 7 years ago

Hey guys,

im not really sure if this is intended or not but aws-es-kibana doesnt seem to work with CLI profiles which includes roles like the following construct.

[xxx-logon]
aws_access_key_id = xxx
aws_secret_access_key = xxx

[es-test]
role_arn = arn:aws:iam::xxxxx:role/es_test
source_profile = xxx-logon

When i use AWS_PROFILE=es-test the webserver is giving me the following return:

{"message":"The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.\n\nThe Canonical String for this request should have been\n'GET\n/\n\nhost:https\nx-amz-date:20170725T142058Z\nx-amz-security-................

Is anyone one of you working with roles instead of local users?

Best regards, Markus

edrzmr commented 7 years ago

same problem here :(

taxpon commented 7 years ago

Same problem..

edrzmr commented 7 years ago

this works fine here: https://github.com/abutaha/aws-es-proxy

Amit-A commented 6 years ago

Same problem here

cortopy commented 6 years ago

I've spent some "good" few hours on this. It appears this package has not been updated for a long while and there not one, not two, but three awaiting pull requests that would solve the issue!!!

In my case my error was writing the endpoint with https://. Either apply https://github.com/santthosh/aws-es-kibana/pull/23 or just remove it. Other pull requests do different things