How to set custom root (endpoint_url) for corporate aws

[asant-leitha]

In order to access my corporate aws instance I need to set a custom root otherwise I get 403 Unauthorized. How to do that using the config file or the vscode toolkit plugin?

[richardhboyd]

Can you share a little more context about your setup? Are you referring to VSCode's multi-root workspace? What action is returning the 403 error?

[richardhboyd]

Can you run aws sts get-caller-identity from your command line to ensure that your credentials are valid?

[asant-leitha]

They are valid as I can successfully authenticate using DataGrip. The only difference is that I need to set a custom root to get access

[richardhboyd]

I'm still unclear what the custom root is. are you referring to the root of the workspace? where are you setting that?

[asant-leitha]

custom root is the red line

[richardhboyd]

let me check with the team that owns the IDE Extension.

[justinmk3]

Unless https://github.com/aws/aws-sdk-js-v3 implicitly supports endpoint_url , AWS Toolkit for VSCode has no explicit support for this. AWS Toolkit depends on the SDK to understand the credentials configuration.

The only sdk issues I could find that might be related:

• Missing documentation on how to use a S3 service that is not on AWS? aws-sdk-js-v3#5189
• chore(clients): override endpoint in runtimeConfig aws-sdk-js-v3#5312

[justinmk3]

I created #3961 to track this as a feature request.

This is my config file

[default]
endpoint_url = https://url.it:port
aws_access_key_id = XXXXXXXXXX
aws_secret_access_key = xxxxxxxx/xxxxxxx
ca-bundle = "path/to/file.pem"

Does that config work with AWS CLI?

• ca-bundle is not listed on https://awscli.amazonaws.com/v2/documentation/api/latest/topic/config-vars.html . Did you mean ca_bundle ?
• endpoint_url is documented at https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-endpoints.html but not sure if the SDK supports it.

[asant-leitha]

Running it using the option --no-verify-ssl will print

An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied

because I do not have access to all roots

[justinmk3]

"Roots" appears to be a DataGrip concept that I am not familiar with. Is there documentation for it?

[asant-leitha]

Basically it is a root path in fact I am successfully connecting to my corporate aws instance by launching

aws s3 ls s3://custom-root --no-verify-ssl

[justinmk3]

Ok so "root" is equivalent to endpoint_url?

[asant-leitha]

No the endpoint is the url of the corporate aws instance and the root is the root path of the buckets