Issue running setup.js about aws-lambda-redshift-loader HOT 7 CLOSED

Hello,

Sorry to hear you have an issue with this. Can you please confirm that the user credentials applied to your session where you are running the setup.js has rights to the AWS Key Management Service, specifically kms:DescribeKey, kms:GetKeyPolicy and kms:Encrypt?

Thx,

Ian

from aws-lambda-redshift-loader.

I've also just pushed a small update to kmsCrypto.js that should result in a better error message than what you are getting now.

from aws-lambda-redshift-loader.

Ian, thanks for the quick response. I did a pull and re ran the setup. The new error message is below:

Unknown Error during Customer Master Key describe
Error during resolution of Customer Master Key
/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/request.js:32
          throw err;
                ^
TypeError: Cannot read property 'length' of null
    at Object.toLambdaStringFormat (/Users/andrewguy/src/aws-lambda-redshift-loader/kmsCrypto.js:222:14)
    at /Users/andrewguy/src/aws-lambda-redshift-loader/setup.js:139:19
    at /Users/andrewguy/src/aws-lambda-redshift-loader/kmsCrypto.js:105:11
    at Response.<anonymous> (/Users/andrewguy/src/aws-lambda-redshift-loader/kmsCrypto.js:83:12)
    at Request.<anonymous> (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/request.js:350:18)
    at Request.callListeners (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/sequential_executor.js:100:18)
    at Request.emit (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/sequential_executor.js:77:10)
    at Request.emit (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/request.js:604:14)
    at Request.transition (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/request.js:21:12)
    at AcceptorStateMachine.runTo (/Users/andrewguy/src/aws-lambda-redshift-loader/node_modules/aws-sdk/lib/state_machine.js:14:12)

I'm running with credentials in .aws/credentials that have this policy:
{
"Statement": [
{
"Effect": "Allow",
"NotAction": "iam:",
"Resource": ""
}
]
}

That should work, or no? Is KMS categorized under IAM?

Thanks,
Andy

from aws-lambda-redshift-loader.

So not much better of an error message then. You will need kms :* grants to use so, a well as dynamo db write privileges.

from aws-lambda-redshift-loader.

Once I ran export AWS_.... instead of relying on the credentials file, the script completed. Why would it not read my credential file? the permissions seem fine on it.

from aws-lambda-redshift-loader.

For the javascript SDK, it has to be in your home folder/.aws/credentials. Was that the path for the file?

from aws-lambda-redshift-loader.

Yes, it is definitely in there:
/Users/andrewguy/.aws/credentials
I believe this happened with another AWS service before on my system..hmmm. Anyway, I believe this issue can be closed, since the original problem has been solved.

from aws-lambda-redshift-loader.