mtanda/grafana-aws-athena-datasource

Plugin does not work with assumed roles in profiles

tillepille opened this issue · 0 comments

I mounted my aws credentials and config via
docker run -d --name=grafana -p 3000:3000 -e GF_PLUGINS_ALLOW_LOADING_UNSIGNED_PLUGINS=mtanda-aws-athena-datasource -v $(pwd)/.aws:/home/grafana/.aws grafana/grafana

and specified the to-be-used profile (ATHENA) as the Credentials Profile Name but the only feedback I get is Unable to call Athena API

My AWS config looks like this

[profile ATHENA]
region=eu-central-1
output=json
source_profile=USER-session
role_arn=arn:aws:iam::<Account>:role/athena
role_session_name = athena-data

credentials (generated via script because of 2FA) like this

[USER-session]
aws_access_key_id = KEY
aws_secret_access_key = SECRET
aws_session_token = someLongToken

Grafana version: 8.0.6