Giters

awslabs / ssosync

Populate AWS SSO directly with your G Suite users and groups using either a CLI or AWS Lambda

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

401 error getting AWS groups

danielnovello-pf opened this issue · comments

commented

401 error getting AWS groups

All of a sudden, the Lamda function does not work. Its able to retrieve the Google groups, but fails when attempting to get the AWS groups.

To Reproduce
Steps to reproduce the behavior:

  1. Create Function URL to run on-demand
  2. Ran function and watch CloudWatch logs
  3. Removed function and CloudWatch log group
  4. Re-deployed function (successfully)
  5. Ran function and watch CloudWatch logs - Failed with same error

Expected behaviour
Once the function retrieves the Google groups, it's suppose to get the AWS groups and perform a diff. Then update/modify the AWS groups

Additional context

We have added more policies to allow access to AWS SSO and organizations (Users groups)
The version we are using is v1.1.0 Attempts to use anything never fail

CloudWatch Logs:

...."collects all google groups..."
{ "group": "AWS Roles - Redacted", "id": "Redacted", "level": "debug", "msg": "get user", "time": "2023-11-02T18:33:57Z" }
{ "level": "info", "msg": "get existing aws groups", "time": "2023-11-02T18:33:57Z" }
{ "level": "error", "msg": "error getting aws groups", "time": "2023-11-02T18:33:57Z" }
status of http response was 401: errorString null

commented
commented

@ChrisPates Thank you. That was it. Apologies for wasting your time. Much appreciated

commented