From 45c9a10d0f775564f3a66f2abf21ccfb5ea0de14 Mon Sep 17 00:00:00 2001 From: clint shryock Date: Wed, 27 Jan 2016 16:30:03 -0600 Subject: [PATCH 1/2] provider/aws: Provide a better message if no AWS creds are found --- builtin/providers/aws/config.go | 8 +++++++- .../docs/providers/aws/index.html.markdown | 17 +++++++++++++++++ 2 files changed, 24 insertions(+), 1 deletion(-) diff --git a/builtin/providers/aws/config.go b/builtin/providers/aws/config.go index 1c9ab296d..51f3dfd03 100644 --- a/builtin/providers/aws/config.go +++ b/builtin/providers/aws/config.go @@ -120,7 +120,13 @@ func (c *Config) Client() (interface{}, error) { // error, and we can present it nicely to the user _, err = creds.Get() if err != nil { - errs = append(errs, fmt.Errorf("Error loading credentials for AWS Provider: %s", err)) + if awsErr, ok := err.(awserr.Error); ok && awsErr.Code() == "NoCredentialProviders" { + errs = append(errs, fmt.Errorf(`No valid credential sources found for AWS Provider. + Please see https://terraform.io/docs/providers/aws/index.html for more information on + providing credentials for the AWS Provider`)) + } else { + errs = append(errs, fmt.Errorf("Error loading credentials for AWS Provider: %s", err)) + } return nil, &multierror.Error{Errors: errs} } awsConfig := &aws.Config{ diff --git a/website/source/docs/providers/aws/index.html.markdown b/website/source/docs/providers/aws/index.html.markdown index e110e9f7c..3e70028c0 100644 --- a/website/source/docs/providers/aws/index.html.markdown +++ b/website/source/docs/providers/aws/index.html.markdown @@ -30,6 +30,23 @@ resource "aws_instance" "web" { } ``` +## Authentication + +The AWS provider offers flexible means of providing credentials for +authentication. Included is support including hard coded credentials, +environment variables, and shared credential files, in that order of precedence. + +Terraform will first attempt to use an `access_key` and `secret_key` provided in +the `provider` block (shown in the example above). If those are omitted, it will +attempt to discover those values by referencing the `AWS_ACCESS_KEY_ID` and +`AWS_SECRET_ACCESS_KEY` environment variables. Lastly, if those are not found +it will look for credentials in the default location for a credentials file, or +the file path specified in the `shared_credentials_file` attribute of the +`provider` block. + +See the argument reference below for information on which attributes to specify +to use a corresponding credential provider. + ## Argument Reference The following arguments are supported in the `provider` block: From 70fae670b714f6523b1186d3b87c339db0081e39 Mon Sep 17 00:00:00 2001 From: clint shryock Date: Fri, 29 Jan 2016 09:09:24 -0600 Subject: [PATCH 2/2] Update auth page for AWS --- .../docs/providers/aws/index.html.markdown | 72 +++++++++++++++---- 1 file changed, 60 insertions(+), 12 deletions(-) diff --git a/website/source/docs/providers/aws/index.html.markdown b/website/source/docs/providers/aws/index.html.markdown index 3e70028c0..01afd7c7b 100644 --- a/website/source/docs/providers/aws/index.html.markdown +++ b/website/source/docs/providers/aws/index.html.markdown @@ -33,19 +33,68 @@ resource "aws_instance" "web" { ## Authentication The AWS provider offers flexible means of providing credentials for -authentication. Included is support including hard coded credentials, -environment variables, and shared credential files, in that order of precedence. +authentication. The following methods are supported, in this order, and +explained below: -Terraform will first attempt to use an `access_key` and `secret_key` provided in -the `provider` block (shown in the example above). If those are omitted, it will -attempt to discover those values by referencing the `AWS_ACCESS_KEY_ID` and -`AWS_SECRET_ACCESS_KEY` environment variables. Lastly, if those are not found -it will look for credentials in the default location for a credentials file, or -the file path specified in the `shared_credentials_file` attribute of the -`provider` block. +- Static credentials +- Environment variables +- Shared credentials file -See the argument reference below for information on which attributes to specify -to use a corresponding credential provider. + +### Static credentials ### + +Static credentials can be provided by adding an `access_key` and `secret_key` in-line in the +aws provider block: + +Usage: + +``` +provider "aws" { + region = "us-west-2" + access_key = "anaccesskey" + secret_key = "asecretkey" +} +``` + +###Environment variables + +You can provide your credentials via `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`, +environment variables, representing your AWS Access Key and AWS Secret Key, respectively. +`AWS_DEFAULT_REGION` and `AWS_SECURITY_TOKEN` are also used, if applicable: + +``` +provider "aws" {} +``` + +Usage: + +``` +$ exoprt AWS_ACCESS_KEY_ID="anaccesskey" +$ export AWS_SECRET_ACCESS_KEY="asecretkey" +$ export AWS_DEFAULT_REGION="us-west-2" +$ terraform plan +``` + +###Shared Credentials file + +You can use an AWS credentials file to specify your credentials. The default +location is `$HOME/.aws/credentials` on Linux and OSX, or `"%USERPROFILE%\.aws\credentials"` +for Windows users. If we fail to detect credentials inline, or in the +environment, Terraform will check this location. You can optionally specify a +different location in the configuration by providing `shared_credentials_file`, +or in the environment with the `AWS_SHARED_CREDENTIALS_FILE` variable. This +method also supports a `profile` configuration and matching `AWS_PROFILE` +environment variable: + +Usage: + +``` +provider "aws" { + region = "us-west-2" + shared_credentials_file = "/Users/tf_user/.aws/creds" + profile = "customprofile" +} +``` ## Argument Reference @@ -90,4 +139,3 @@ The following arguments are supported in the `provider` block: * `kinesis_endpoint` - (Optional) Use this to override the default endpoint URL constructed from the `region`. It's typically used to connect to kinesalite. -