CODEWITHSUNDEEP
c#amazon-web-servicesamazon-s3
treendy
treendy

Reputation: 473

Unable to get IAM security credentials for AWS S3

This error is driving me crazy, had the same issue with a lambda web api, but that worked when uploaded, so that will do for now

This project however will be a NuGet package, and i need to be able to simply upload a file to S3

I have the code in place using the following : "https://docs.aws.amazon.com/AmazonS3/latest/dev/HLuploadFileDotNet.html"

im trying to run this local, but getting the Unable to get IAM security credentials from EC2 Instance Metadata Service." error

within visual studio, i can see the AWS Explorer, and i can create a bucket from here... so i have my user setup... but when i run local... there is no user???

i know its going to be a one line missing value somewhere :(

Upvotes: 1

Views: 8469

Answers (3)

Muhammad Armaghan
Muhammad Armaghan

Reputation: 619

One of the most secure ways to provide your AWS credentials is to set them as environment variables on the IIS server.

Installing the AWS CLI on your computer is the first step. then go to command prompt and run this query

  1. aws Secrets describe-secret --secret-id keyname --region regionname
  2. aws configure
  3. AWS_ACCESS_KEY_ID: Your AWS access key ID
  4. AWS_SECRET_ACCESS_KEY: Your AWS secret access key
  5. Format :json

You set this setting after completing these steps.

  1. Open System Properties on the server.

  2. Advanced tab and click on Environment Variables.

  3. Under System Variables, click New and add the following: AWS_ACCESS_KEY_ID: Your AWS access key ID
    AWS_SECRET_ACCESS_KEY: Your AWS secret access key

and restart the server

Upvotes: 0

treendy
treendy

Reputation: 473

Thank you @Geeshan for your answer, it gave me some direction on where to look

However, I had my credentials file setup, but the answer to my question was you also need to have a profile setup with the name "default"

Also, now know that you dont need a matching "default" IAM user.

On the AWS IAM User page, you create your users as normal, no need to create a default user. In Visual studio, when you create a new profile, if your profile is named "default", and you enter they key and secret key for one of your IAM user, running your application will use that user (I miss understood this profile name, and was assuming it needs to match your IAM user, so initially i create a "Default" IAM user. which i now know, is not needed)

If you dont want to use the default then, you can choose a user by using "TryGetProfile and TryGetAWSCredentials in your application code (see below)

enter image description here

Upvotes: 3

Geeshan
Geeshan

Reputation: 534

This is due to missing credentials in your local machine. Setting up the AWS Explorer will not provide the credentials to running your code.

One way to setup the credentials is to use a Credentials File in C:\users\awsuser\.aws\credentials (asuming you are using windows).
The following is an example of a profile in the credentials file.

[default]
aws_access_key_id = {accessKey}
aws_secret_access_key = {secretKey}

Here you can read more about managing credentials for .Net

Upvotes: 1

Related Questions