Troubleshoot AWS CLI Access

If you are having issues using awscli, verify the credentials haven’t changed and that the time is correct on the instance you’re trying to use awscli.

Date and Time

An error occurred (AuthFailure) when calling the DescribeAvailabilityZones operation: AWS was not able to validate the provided access credentials
An error occurred (SignatureDoesNotMatch) when calling the DescribeAccountLimits operation: Signature expired: 20170220T220024Z is now earlier than 20170220T220048Z (20170220T220548Z - 5 min.)

If you are getting errors like above and the credentials haven’t changed. You most likely have a time source issue, and the signatures are being signed with invalid time data. Update time using a reliable NTP source and try again.


A client error (SignatureDoesNotMatch) occurred when calling the GetUser operation: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.

Verify environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are set to the correct values.

Feb 20th, 2017 • Posted in Amazon Web Service, CLI
No comments yet.

Leave a comment

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>