How to resolve s3 bucket connections error "Error Code: InvalidClientTokenId"?

How to resolve s3 bucket connections error "Error Code: InvalidClientTokenId"?

book

Article ID: KB0072822

calendar_today

Updated On:

Products Versions
TIBCO Data Virtualization 8.4

Description

Error Code: InvalidClientTokenId indicates provided Access Key ID and Secret Access Key are invalid or no longer valid.

Issue/Introduction

Refer this article to resolve S3 bucket connection error:InvalidClientTokenId.

Environment

Windows, Unix-based.

Resolution

While consuming resources from AWS S3 bucket inside the TIBCO Data Virtualization if the user encounters the following error:

org.apache.hadoop.fs.s3a.auth.AssumedRoleCredentialProvider on : com.amazonaws.services.securitytoken.model.AWSSecurityTokenServiceException: The security token included in the request is invalid. (Service: AWSSecurityTokenService; Status Code: 403; Error Code: InvalidClientTokenId; 


This means either provided Access Key ID and Secret Access Key are invalid or no longer valid(Access Key ID and Secret Access Key expires after fix interval and needs to be changed every time after that interval).

 

User has to generate a new Access key from AWS by following below given steps:

  • Navigate to Services=> IAM=> Users 
  • Click on the User name
  • Navigate to the Security credentials tab.
User-added image
  • Click on the Create Access Key button to create a new access key.
  • Use newly generated Access Key ID and Secret Access while connecting to AWS S3 from TIBCO Data Virtualization Studio.