Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL does not work for the ECS Server with AWS Python/boto3 SDK #936

Open
synfinatic opened this issue Jul 5, 2024 · 1 comment
Open
Labels
blocked Blocked on something else bug Something isn't working

Comments

@synfinatic
Copy link
Owner

synfinatic commented Jul 5, 2024

Due to a bug/limitation in the AWS Boto3 SDK (unsure about other SDKs), users are unable to set the required environment variable to: https://localhost:4144 as documented. Opened a ticket with AWS on the issue here: aws/aws-sdk#774

Until this issue is resolved upstream, aws-sso-cli users using the ECS server must:

  1. Not enable/use SSL. Do not run aws-sso ecs cert load to load an SSL cert/private key
  2. Use AWS_CONTAINER_CREDENTIALS_FULL_URI=http://localhost:4144/

If you wish to manually add the certificate to the AWS SDK CA bundle or have the means to use certificate signed by a trusted CA, you can use aws-sso ecs cert load --force ... to load the necessary private key and certificate.

TBD: Does this issue impact other AWS SDK's (Go, Java, etc)

@synfinatic synfinatic added bug Something isn't working blocked Blocked on something else labels Jul 5, 2024
@synfinatic synfinatic changed the title SSL does not work for the ECS Server SSL does not work for the ECS Server with AWS SDK Jul 5, 2024
@synfinatic synfinatic changed the title SSL does not work for the ECS Server with AWS SDK SSL does not work for the ECS Server with AWS Python/boto3 SDK Jul 5, 2024
@synfinatic
Copy link
Owner Author

Tested with the Go SDK v2 and doesn't work there either. :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked Blocked on something else bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant