luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

AWS Auth: Update error message to include underlying error (#11638)

This commit is contained in:
Michael Golowka 2021-05-17 13:56:35 -06:00 committed by GitHub
parent e212ec5d8e
commit 10b1ff8f69
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
builtin/credential/aws/path_login.go
View File

@ -1364,7 +1364,7 @@ func (b *backend) pathLoginUpdateIam(ctx context.Context, req *logical.Request,
if roleEntry.InferredEntityType == ec2EntityType { if roleEntry.InferredEntityType == ec2EntityType {
instance, err := b.validateInstance(ctx, req.Storage, entity.SessionInfo, roleEntry.InferredAWSRegion, callerID.Account) instance, err := b.validateInstance(ctx, req.Storage, entity.SessionInfo, roleEntry.InferredAWSRegion, callerID.Account)
if err != nil { if err != nil {
return logical.ErrorResponse(fmt.Sprintf("failed to verify %s as a valid EC2 instance in region %s", entity.SessionInfo, roleEntry.InferredAWSRegion)), nil return logical.ErrorResponse("failed to verify %s as a valid EC2 instance in region %s: %s", entity.SessionInfo, roleEntry.InferredAWSRegion, err), nil
} }
// build a fake identity doc to pass on metadata about the instance to verifyInstanceMeetsRoleRequirements // build a fake identity doc to pass on metadata about the instance to verifyInstanceMeetsRoleRequirements

3
changelog/11638.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:improvement
auth/aws: Underlying error included in validation failure message.
```