Plugin does not work with assumed roles in profiles
tillepille opened this issue · 0 comments
tillepille commented
I mounted my aws credentials and config via
docker run -d --name=grafana -p 3000:3000 -e GF_PLUGINS_ALLOW_LOADING_UNSIGNED_PLUGINS=mtanda-aws-athena-datasource -v $(pwd)/.aws:/home/grafana/.aws grafana/grafana
and specified the to-be-used profile (ATHENA) as the Credentials Profile Name but the only feedback I get is Unable to call Athena API
My AWS config looks like this
[profile ATHENA]
region=eu-central-1
output=json
source_profile=USER-session
role_arn=arn:aws:iam::<Account>:role/athena
role_session_name = athena-data
credentials (generated via script because of 2FA) like this
[USER-session]
aws_access_key_id = KEY
aws_secret_access_key = SECRET
aws_session_token = someLongToken
Grafana version: 8.0.6