Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1

[rksingh-sht]

I am trying to the secret values using below code snippet but i am getting Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
Can you please help me in identifying the issue.Below is the code i am using:

const AWS = require("aws-sdk");
const region = 'ap-southeast-1';

// set the default config object
var creds = new AWS.CognitoIdentityCredentials({
  IdentityPoolId: 'ap-southeast-1:***********'
 });
 AWS.config.credentials = creds;
 console.log('credentials', AWS.config.credentials)

const client = new AWS.SecretsManager({
  region: region,
 credentials : creds

});

export const getSecrets = (SecretId) => {
    client.getSecretValue({ SecretId }, (err, result) => {
      if (err) console.log(err);
      if (result) {
        console.log(result);
        console.log(result.SecretString);
      }
    });
};

### getSecrets('dev/api/backend-auth');`

[ajredniwja]

What do you see when you try to print the client?
The error is suggesting its not able to find credentials.

[rksingh-sht]

This the client object , i have stringified @ajredniwja
client {"config":{"credentials":{"expired":true,"expireTime":null,"refreshCallbacks":[],"params":{"IdentityPoolId":"ap-southeast-1:c5a88629-2f9d-4770-8e7b-5536bf74461b"},"data":null,"_identityId":null,"_clientConfig":{}},"credentialProvider":null,"region":"ap-southeast-1","logger":null,"apiVersions":{},"apiVersion":null,"endpoint":"secretsmanager.ap-southeast-1.amazonaws.com","httpOptions":{"timeout":120000},"maxRedirects":10,"paramValidation":true,"sslEnabled":true,"s3ForcePathStyle":false,"s3BucketEndpoint":false,"s3DisableBodySigning":true,"s3UsEast1RegionalEndpoint":"legacy","computeChecksums":true,"convertResponseTypes":true,"correctClockSkew":false,"customUserAgent":null,"dynamoDbCrc32":true,"systemClockOffset":0,"signatureVersion":"v4","signatureCache":true,"retryDelayOptions":{},"useAccelerateEndpoint":false,"clientSideMonitoring":false,"endpointCacheSize":1000,"hostPrefixEnabled":true,"stsRegionalEndpoints":"legacy","useFipsEndpoint":false,"useDualstackEndpoint":false,"token":null},"isGlobalEndpoint":false,"endpoint":{"protocol":"https:","host":"secretsmanager.ap-southeast-1.amazonaws.com","port":443,"hostname":"secretsmanager.ap-southeast-1.amazonaws.com","pathname":"/","path":"/","href":"https://secretsmanager.ap-southeast-1.amazonaws.com/"},"_events":{"apiCallAttempt":[null],"apiCall":[null]},"_clientId":1}

let me know if any other info required.

[rksingh-sht]

AccessDeniedException: User: arn:aws:sts::359890608932:assumed-role/Cognito_shtbotdevuiidentitypoolUnauth_Role/CognitoIdentityCredentials is not authorized to perform: secretsmanager:GetSecretValue on resource: dev/api/backend-auth because no session policy allows the secretsmanager:GetSecretValue action

[ajredniwja]

The error is suggesting you not having enough permissions.
Can you allow the mentioned secretsmanager:GetSecretValue action to the policy.

See: https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.