agent: remote.s3 AuthorizationHeaderMalformed

What’s wrong?

With below remote.s3 config, the agent is starting up, but is not able to access the s3 bucket. Accessing the bucket via cmd through the same device is working.

Steps to reproduce

adding below config with an s3 endpoint and relevant credentials

System information

WIN10 x64

Software version

grafana-agent-flow-installer.exe V0.33.2

Configuration

remote.s3 "metrics_prometheus" {
  path = "s3://mybucket-agent-modules/metrics/module.river"
  client {
    endpoint = "https://bucket.vpce-***-***.s3.eu-central-1.vpce.amazonaws.com"
    key = "A***"
    secret = "Pa***"
    region = "eu-central-1"
  }
}

Logs

operation error S3: GetObject, https response error StatusCode: 400, RequestID: G*, HostID: K*, api error AuthorizationHeaderMalformed: The authorization header is malformed; a non-empty region must be provided in the credential.

About this issue

  • Original URL
  • State: closed
  • Created a year ago
  • Comments: 17 (8 by maintainers)

Most upvoted comments

Its a bug in our (agent) side, apparently when using an endpoint the Region is set but you have to EXPLICITLY set the signing region. I need to see if there is any scenario where region != signing region is valid.