aws-beam/aws-elixir

AWS.Lambda.invoke_async 403 with signature mismatch

Closed this issue · 7 comments

ryanwinchester commented

When we try to invoke a Lambda, we get a 403 error:

client = %AWS.Client{
  access_key_id: Keyword.fetch!(config, :access_key_id),
  secret_access_key: Keyword.fetch!(config, :secret_access_key),
  region: Keyword.fetch!(config, :region)
}
    
function_name = "arn:aws:lambda:ca-central-1:3456789:function:foo_bar"

AWS.Lambda.invoke_async(client, function_name, %{foo: "bar"})
{:error,
 {:unexpected_response,
  %{
    body: "{\"message\":\"The request signature we calculated does not match the signature you provided.
      Check your AWS Secret Access Key and signing method. Consult the service documentation for details.\"}",
    headers: [
      {"Date", "Tue, 15 Jun 2021 06:08:39 GMT"},
      {"Content-Type", "application/json"},
      {"Content-Length", "192"},
      {"Connection", "keep-alive"},
      {"x-amzn-RequestId", "a1e8e46f-8024-40e9-9c48-5091cb6c4ea1"},
      {"x-amzn-ErrorType", "InvalidSignatureException"}
    ],
    status_code: 403
  }}}

I can't understand what I could possibly mess up here, since there is not a lot of complexity in the invoke_async/3 call?

Any ideas?

philss commented

Hi @ryanwinchester 👋
What the version of aws-elixir are you using?

I think we had some similar issues and we fixed in master. Can you try it?

ryanwinchester commented

@philss happens using

{:aws, github: "aws-beam/aws-elixir", branch: "master"}
philss commented

@ryanwinchester thanks! I don't think it's something you are doing. It's probably another bug in the signature algorithm. I will investigate.

philss commented

@ryanwinchester I'm investigating this. But before I find the problem, can you try to use the invoke function as a substitute for invoke_async? You can call invoke with InvocationType as Event, like the docs suggest:

client = %AWS.Client{
  access_key_id: Keyword.fetch!(config, :access_key_id),
  secret_access_key: Keyword.fetch!(config, :secret_access_key),
  region: Keyword.fetch!(config, :region)
}
    
function_name = "arn:aws:lambda:ca-central-1:3456789:function:foo_bar"

AWS.Lambda.invoke(client, function_name, %{"foo" => "bar", "InvocationType" => "Event"})
ryanwinchester commented

@philss same error for me

  • 👍1
philss commented

@ryanwinchester please try again updating from master. I managed to fix the problem :)

  • 🎉1
  • ❤️1
ryanwinchester commented

Yup :)

{:ok, nil,
 %{
   body: "",
   headers: [
     {"Date", "Fri, 18 Jun 2021 02:19:33 GMT"},
     {"Content-Type", "application/json"},
     {"Content-Length", "0"},
     {"Connection", "keep-alive"},
     {"x-amzn-RequestId", "88ee2cb4-f022-4d39-9b31-b6711581a679"}
   ],
   status_code: 202
 }}
  • 🎉1