Skip to content

Instantly share code, notes, and snippets.

@sdickhoven

sdickhoven/tf_s3_backend_assume_role_debug.out

Created March 11, 2022 04:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sdickhoven/3df764c773a70cd081ce03de2d870f9a to your computer and use it in GitHub Desktop.
Save sdickhoven/3df764c773a70cd081ce03de2d870f9a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tf_s3_backend_assume_role_debug.out
2022-03-10T22:12:20.798-0500 [INFO] Terraform version: 1.1.7
2022-03-10T22:12:20.798-0500 [INFO] Go runtime version: go1.17.6
2022-03-10T22:12:20.798-0500 [INFO] CLI args: []string{"terraform", "plan", "-refresh=false", "-lock=false"}
2022-03-10T22:12:20.798-0500 [DEBUG] Attempting to open CLI config file: /Users/sdickhoven/.terraformrc
2022-03-10T22:12:20.798-0500 [DEBUG] File doesn't exist, but doesn't need to. Ignoring.
2022-03-10T22:12:20.798-0500 [DEBUG] ignoring non-existing provider search directory terraform.d/plugins
2022-03-10T22:12:20.798-0500 [DEBUG] ignoring non-existing provider search directory /Users/sdickhoven/.terraform.d/plugins
2022-03-10T22:12:20.798-0500 [DEBUG] ignoring non-existing provider search directory /Users/sdickhoven/Library/Application Support/io.terraform/plugins
2022-03-10T22:12:20.798-0500 [DEBUG] ignoring non-existing provider search directory /Library/Application Support/io.terraform/plugins
2022-03-10T22:12:20.798-0500 [INFO] CLI command args: []string{"plan", "-refresh=false", "-lock=false"}
2022-03-10T22:12:20.916-0500 [INFO] AWS Auth provider used: "EnvProvider"
2022-03-10T22:12:20.916-0500 [INFO] Attempting to AssumeRole arn:aws:iam::111111111111:role/some.role (SessionName: "", ExternalId: "")
2022-03-10T22:12:20.916-0500 [DEBUG] [aws-sdk-go] DEBUG: Request sts/AssumeRole Details:
---[ REQUEST POST-SIGN ]-----------------------------
POST / HTTP/1.1
Host: sts.amazonaws.com
User-Agent: aws-sdk-go/1.42.35 (go1.17.6; darwin; amd64)
Content-Length: 190
Authorization: AWS4-HMAC-SHA256 Credential=ASxxxxxxxxxxxxxxxxxx/20220311/us-east-1/sts/aws4_request, SignedHeaders=content-length;content-type;host;x-amz-date;x-amz-security-token, Signature=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-Amz-Date: 20220311T031220Z
X-Amz-Security-Token: nnnnnnnnnnnnnnnnnnn//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Accept-Encoding: gzip
Action=AssumeRole&DurationSeconds=3600&RoleArn=arn%3Aaws%3Aiam%3A%3A111111111111%3Arole%2Fsome.role&RoleSessionName=1646968340916323000&Version=2011-06-15
-----------------------------------------------------
2022-03-10T22:12:21.178-0500 [DEBUG] [aws-sdk-go] DEBUG: Response sts/AssumeRole Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 200 OK
Connection: close
Content-Length: 1100
Content-Type: text/xml
Date: Fri, 11 Mar 2022 03:12:21 GMT
Keep-Alive: timeout=5
X-Amzn-Requestid: 0e642b6c-fc91-4de3-95b7-16ee1c87227c
-----------------------------------------------------
2022-03-10T22:12:21.178-0500 [DEBUG] [aws-sdk-go] <AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
<AssumeRoleResult>
<AssumedRoleUser>
<AssumedRoleId>ARxxxxxxxxxxxxxxxxxxx:1646968340916323000</AssumedRoleId>
<Arn>arn:aws:sts::111111111111:assumed-role/some.role/1646968340916323000</Arn>
</AssumedRoleUser>
<Credentials>
<AccessKeyId>ATxxxxxxxxxxxxxxxxxx</AccessKeyId>
<SecretAccessKey>Y4xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</SecretAccessKey>
<SessionToken>aaaaaaaaaaaaaaa//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</SessionToken>
<Expiration>2022-03-11T04:12:21Z</Expiration>
</Credentials>
</AssumeRoleResult>
<ResponseMetadata>
<RequestId>0e642b6c-fc91-4de3-95b7-16ee1c87227c</RequestId>
</ResponseMetadata>
</AssumeRoleResponse>
2022-03-10T22:12:21.181-0500 [DEBUG] Trying to get account information via sts:GetCallerIdentity
2022-03-10T22:12:21.181-0500 [DEBUG] [aws-sdk-go] DEBUG: Request sts/GetCallerIdentity Details:
---[ REQUEST POST-SIGN ]-----------------------------
POST / HTTP/1.1
Host: sts.amazonaws.com
User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.1.7 aws-sdk-go/1.42.35 (go1.17.6; darwin; amd64)
Content-Length: 43
Authorization: AWS4-HMAC-SHA256 Credential=ATxxxxxxxxxxxxxxxxxx/20220311/us-east-1/sts/aws4_request, SignedHeaders=content-length;content-type;host;x-amz-date;x-amz-security-token, Signature=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-Amz-Date: 20220311T031221Z
X-Amz-Security-Token: aaaaaaaaaaaaaaa//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Accept-Encoding: gzip
Action=GetCallerIdentity&Version=2011-06-15
-----------------------------------------------------
2022-03-10T22:12:21.290-0500 [DEBUG] [aws-sdk-go] DEBUG: Response sts/GetCallerIdentity Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 200 OK
Connection: close
Content-Length: 476
Content-Type: text/xml
Date: Fri, 11 Mar 2022 03:12:20 GMT
Keep-Alive: timeout=5
X-Amzn-Requestid: 0d97de34-c5b6-4e3d-8e10-7a3468b056b5
-----------------------------------------------------
2022-03-10T22:12:21.290-0500 [DEBUG] [aws-sdk-go] <GetCallerIdentityResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
<GetCallerIdentityResult>
<Arn>arn:aws:sts::111111111111:assumed-role/some.role/1646968340916323000</Arn>
<UserId>ARxxxxxxxxxxxxxxxxxxx:1646968340916323000</UserId>
<Account>111111111111</Account>
</GetCallerIdentityResult>
<ResponseMetadata>
<RequestId>0d97de34-c5b6-4e3d-8e10-7a3468b056b5</RequestId>
</ResponseMetadata>
</GetCallerIdentityResponse>
2022-03-10T22:12:21.355-0500 [DEBUG] checking for provisioner in "."
2022-03-10T22:12:21.356-0500 [DEBUG] checking for provisioner in "/usr/local/bin"
2022-03-10T22:12:21.357-0500 [INFO] backend/local: starting Plan operation
2022-03-10T22:12:21.358-0500 [DEBUG] [aws-sdk-go] DEBUG: Request s3/ListObjects Details:
---[ REQUEST POST-SIGN ]-----------------------------
GET /?max-keys=1000&prefix=env%3A%2F HTTP/1.1
Host: my-remote-state.s3.amazonaws.com
User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.1.7 aws-sdk-go/1.42.35 (go1.17.6; darwin; amd64)
Authorization: AWS4-HMAC-SHA256 Credential=ATxxxxxxxxxxxxxxxxxx/20220311/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-security-token, Signature=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20220311T031221Z
X-Amz-Security-Token: aaaaaaaaaaaaaaa//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Accept-Encoding: gzip
-----------------------------------------------------
2022-03-10T22:12:21.478-0500 [DEBUG] [aws-sdk-go] DEBUG: Response s3/ListObjects Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Fri, 11 Mar 2022 03:12:22 GMT
Server: AmazonS3
X-Amz-Bucket-Region: us-east-1
X-Amz-Id-2: zdS336u2rMmmg81GUomnSzE9hzz09tBz4amfRGZU2DNMNbiZO0xw16yiC+qzspq0eRaXNlf6dQg=
X-Amz-Request-Id: XHWXEETJC672NTFW
...
2022-03-10T22:12:27.132-0500 [DEBUG] Initializing remote state backend: s3
2022-03-10T22:12:27.133-0500 [DEBUG] Initializing remote state backend: s3
2022-03-10T22:12:27.133-0500 [INFO] AWS Auth provider used: "EnvProvider"
2022-03-10T22:12:27.135-0500 [DEBUG] Trying to get account information via sts:GetCallerIdentity
2022-03-10T22:12:27.135-0500 [DEBUG] [aws-sdk-go] DEBUG: Request sts/GetCallerIdentity Details:
---[ REQUEST POST-SIGN ]-----------------------------
POST / HTTP/1.1
Host: sts.amazonaws.com
User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.1.7 aws-sdk-go/1.42.35 (go1.17.6; darwin; amd64)
Content-Length: 43
Authorization: AWS4-HMAC-SHA256 Credential=ASxxxxxxxxxxxxxxxxxx/20220311/us-east-1/sts/aws4_request, SignedHeaders=content-length;content-type;host;x-amz-date;x-amz-security-token, Signature=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-Amz-Date: 20220311T031227Z
X-Amz-Security-Token: nnnnnnnnnnnnnnnnnnn//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Accept-Encoding: gzip
Action=GetCallerIdentity&Version=2011-06-15
-----------------------------------------------------
2022-03-10T22:12:27.247-0500 [DEBUG] [aws-sdk-go] DEBUG: Response sts/GetCallerIdentity Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 200 OK
Connection: close
Content-Length: 509
Content-Type: text/xml
Date: Fri, 11 Mar 2022 03:12:27 GMT
Keep-Alive: timeout=5
X-Amzn-Requestid: fd7ecb8c-4bba-43f5-8a4e-7e14045d1bf4
-----------------------------------------------------
2022-03-10T22:12:27.247-0500 [DEBUG] [aws-sdk-go] <GetCallerIdentityResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
<GetCallerIdentityResult>
<Arn>arn:aws:sts::222222222222:assumed-role/AWSReservedSSO_my_native_role_fefefefefefefefe/sdickhoven@somewhere.com</Arn>
<UserId>AOxxxxxxxxxxxxxxxxxxx:sdickhoven@somewhere.com</UserId>
<Account>222222222222</Account>
</GetCallerIdentityResult>
<ResponseMetadata>
<RequestId>fd7ecb8c-4bba-43f5-8a4e-7e14045d1bf4</RequestId>
</ResponseMetadata>
</GetCallerIdentityResponse>
2022-03-10T22:12:27.248-0500 [DEBUG] [aws-sdk-go] DEBUG: Request s3/ListObjects Details:
---[ REQUEST POST-SIGN ]-----------------------------
GET /?max-keys=1000&prefix=env%3A%2F HTTP/1.1
Host: my-remote-state.s3.amazonaws.com
User-Agent: APN/1.0 HashiCorp/1.0 Terraform/1.1.7 aws-sdk-go/1.42.35 (go1.17.6; darwin; amd64)
Authorization: AWS4-HMAC-SHA256 Credential=ASxxxxxxxxxxxxxxxxxx/20220311/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-security-token, Signature=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20220311T031227Z
X-Amz-Security-Token: nnnnnnnnnnnnnnnnnnn//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx//////////xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Accept-Encoding: gzip
-----------------------------------------------------
2022-03-10T22:12:27.388-0500 [DEBUG] [aws-sdk-go] DEBUG: Response s3/ListObjects Details:
---[ RESPONSE ]--------------------------------------
HTTP/1.1 403 Forbidden
Connection: close
Transfer-Encoding: chunked
Content-Type: application/xml
Date: Fri, 11 Mar 2022 03:12:26 GMT
Server: AmazonS3
X-Amz-Bucket-Region: us-east-1
X-Amz-Id-2: 2kGipQ8Oa2I2UssDzXFGTcM9h7zJ89J2TWHXlXA3RGJkx2mLY2mOUVmt2G3AKVvC1nYNHNwaqbE=
X-Amz-Request-Id: VRP8RZ5ECJPEZT1H
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment