Grafana authentication with AWS IAM Role Anywhere

  • What Grafana version and what operating system are you using?
    Im using Grafana version 9.0.4 on Ubuntu in Azure.

  • What are you trying to achieve?

I’m trying to give authenticate to another AWS Organization with IAM Role anywhere, the new feature.

  • How are you trying to achieve it?

I followed this blog: Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere | AWS Security Blog (amazon.com)

I put the external authentication method in .aws/credentials file.

  • What happened?
    It doesn’t seem to work, even though I put 0644 permissions in the credentials file.

  • What did you expect to happen?

I expected for the authentication to work.

  • Can you copy/paste the configuration(s) that you are having problems with?

Everything is in the blog post

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

  • Did you follow any online instructions? If so, what is the URL?

I followed this blog: Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere | AWS Security Blog (amazon.com)

Was anyone able to make it Grafana work with IAM Role anywhere? thanks!

I tried too, but I get the error:

1. CloudWatch metrics query failed: SharedCredsAccessKey: shared credentials smat-itg in /usr/share/grafana/.aws/credentials did not contain aws_access_key_id 2. CloudWatch logs query failed: SharedCredsAccessKey: shared credentials smat-itg in /usr/share/grafana/.aws/credentials did not contain aws_access_key_id

Sees Grafana is explicitly looking for aws_access_key_id and not using the SDK to get a session?