Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

STS authentication failing due to new sts endpoints #1701

Open
JLPung opened this issue Mar 6, 2025 · 0 comments
Open

STS authentication failing due to new sts endpoints #1701

JLPung opened this issue Mar 6, 2025 · 0 comments
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@JLPung
Copy link

JLPung commented Mar 6, 2025

Authentication will fail in some cases where the legacy sts endpoints are not available.
For example if we print the get_caller_identity endpoint url,

def get_caller_identity(session):
    sts_client = session.client("sts")
    print(sts_client.meta.endpoint_url)
    ......

we will get the following value back.

https://sts.amazonaws.com

However, if we want to use the newer sts endpoints such as the ones mentioned in the below document, we can't. Specifying region in the command line does not make scoutsuite use the newer sts endpoints as well.

https://docs.aws.amazon.com/general/latest/gr/sts.html

python3 .\scout.py aws --no-browser -r "ap-southeast-1"
2025-03-06 20:33:18 Work scout[11212] INFO Launching Scout
2025-03-06 20:33:18 Work scout[11212] INFO Authenticating to cloud provider
https://sts.amazonaws.com
https://sts.amazonaws.com
2025-03-06 20:33:22 Work scout[11212] INFO Exiting

There could be some configurations or options that I am missing. Please let me know.

@JLPung JLPung added bug Something isn't working potential Unconfirmed issue labels Mar 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

No branches or pull requests

1 participant