AWS Credentials Refreshed but Still Expired

Question

Anyone has any idea what the following error means?

#aws s3 ls

Credentials were refreshed, but the refreshed credentials are still expired.

I running it from the command line on the server, have already updated the keys couple of time but getting this error which i haven't seen before

Answer 1

I spoke with AWS support about this and they provided a resolution that does not involve changing TZs. What they advised was to check the IAM role assigned to your instanc.

Run this from the affected instance.

curl -v http://169.254.169.254/latest/meta-data/iam/security-credentials/IAM-ROLE

Check the expiration date of the

{
  "Code" : "",
  "LastUpdated" : "",
  "Type" : "",
  "AccessKeyId" : "",
  "SecretAccessKey" : "",
  "Token" : "",
  **"Expiration" : ""**

}

In my case, the expiration date showed a value from yesterday. These are temporary credentials that should refresh every so often but in this case, they refreshed but the expiration date did not change. This explains the error AWS Credentials Refreshed but Still Expired

To resolve

Simply unattach and re-attach the role associated with your instance to get new temporary credentials and try the S3 command again.