IAM/STS update error message for assume role with web id - EUCA-12822

eucalyptus · Oct 17, 2016 · 067a2e1 · 067a2e1
1 parent 42ac981
commit 067a2e1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/clc/modules/tokens/src/main/java/com/eucalyptus/tokens/TokensService.java b/clc/modules/tokens/src/main/java/com/eucalyptus/tokens/TokensService.java
@@ -380,6 +380,8 @@ public AssumeRoleWithWebIdentityResponseType assumeRoleWithWebIdentity(
             RestrictedTypes.doPrivilegedWithoutOwner(
                 Accounts.getRoleFullName( role ),
                 new RoleResolver( role ) ) );
+      } catch ( final AuthException e ) {
+        throw new TokensException( Code.AccessDenied, "Not authorized to perform sts:AssumeRoleWithWebIdentity" );
       } catch ( final Exception e ) {
         throw new TokensException( Code.AccessDenied, e.getMessage( ) );
       }