You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Due to a bug/limitation in the AWS Boto3 SDK (unsure about other SDKs), users are unable to set the required environment variable to: https://localhost:4144 as documented. Opened a ticket with AWS on the issue here: aws/aws-cli#9016
Until this issue is resolved upstream, aws-sso-cli users using the ECS server must:
Not enable/use SSL. Do not run aws-sso ecs cert load to load an SSL cert/private key
Use AWS_CONTAINER_CREDENTIALS_FULL_URI=http://localhost:4144/
If you wish to manually add the certificate to the AWS SDK CA bundle or have the means to use certificate signed by a trusted CA, you can use aws-sso ecs cert load --force ... to load the necessary private key and certificate.
TBD: Does this issue impact other AWS SDK's (Go, Java, etc)
The text was updated successfully, but these errors were encountered:
synfinatic
changed the title
SSL does not work for the ECS Server
SSL does not work for the ECS Server with AWS SDK
Jul 5, 2024
synfinatic
changed the title
SSL does not work for the ECS Server with AWS SDK
SSL does not work for the ECS Server with AWS Python/boto3 SDK
Jul 5, 2024
Due to a bug/limitation in the AWS Boto3 SDK (unsure about other SDKs), users are unable to set the required environment variable to:
https://localhost:4144
as documented. Opened a ticket with AWS on the issue here: aws/aws-cli#9016Until this issue is resolved upstream,
aws-sso-cli
users using the ECS server must:aws-sso ecs cert load
to load an SSL cert/private keyAWS_CONTAINER_CREDENTIALS_FULL_URI=http://localhost:4144/
If you wish to manually add the certificate to the AWS SDK CA bundle or have the means to use certificate signed by a trusted CA, you can use
aws-sso ecs cert load --force ...
to load the necessary private key and certificate.TBD: Does this issue impact other AWS SDK's (Go, Java, etc)
The text was updated successfully, but these errors were encountered: