ECS example credential requirements?

[stmcginnis]

I'm trying to understand why I'm seeing issues trying to use the describe-clusters ECS example.

I'm running in an EC2 instance with an InstanceRole. If I use the aws cli to check my identity, I get back a valid result:

$ aws sts get-caller-identity 
{
    "UserId": "AROA4RJ566GXXXXXXHAXJ:i-9999999999",
    "Account": "99999999999",
    "Arn": "arn:aws:sts::99999999999:assumed-role/InstanceAdmin/i-02f48f9c69b226118"
}

If I use the aws cli to get clusters, that works fine to return my cluster:

$ aws ecs list-clusters
{
    "clusterArns": [
        "arn:aws:ecs:us-east-2:99999999999:cluster/bottlerocket"
    ]
}

But if I try to run the describe-clusters example, that fails to get any results:

$ cargo run --bin describe-clusters
    Finished dev [unoptimized + debuginfo] target(s) in 0.50s
     Running `/home/stmcg/src/scratch/aws-sdk-rust/target/debug/describe-clusters`
Found 0 clusters:

I tried adding a print statement to double check I'm using the correct region:

println!("Region: {:?}", shared_config.region());

And that did print out what I expected:

Region: Some(Region("us-east-2"))

I also tried setting credential environment variables to see if it was something with using an instance role, but no luck with that either:

$ export AWS_ACCESS_KEY_ID=...
$ export AWS_SECRET_ACCESS_KEY=...
$ export AWS_SESSION_TOKEN=....
$ cargo run --bin describe-clusters
    Finished dev [unoptimized + debuginfo] target(s) in 0.50s
     Running `/home/stmcg/src/scratch/aws-sdk-rust/target/debug/describe-clusters`
Found 0 clusters:

Since the aws CLI works, I feel like I must just be missing some extra step. But I'm using the example code directly, and I didn't see anything about any changes needed, so not really sure what I'm missing here. Any pointers would be appreciated.

[jdisanti]

It looks like the CLI command you're using is a different operation: ListClusters vs. DescribeClusters, which explains the different results. That said, I think the example is broken since the comment in it says that it lists the clusters rather than describing a given set of them. Filed awsdocs/aws-doc-sdk-examples#4106 to fix the example.

[stmcginnis]

Thanks! Clusters are indeed missing when I do aws ecs describe-clusters, so at least that is consistent:

{
    "clusters": [],
    "failures": [
        {
            "arn": "arn:aws:ecs:us-east-2:861807767978:cluster/default",
            "reason": "MISSING"
        }
    ]
}

I had assumed list and describe should include the same set of clusters, but apparently not.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.