AWS CLI and S3 | NetApp | Page 1

weak scaffold May 2, 2023, 6:22 PM

#

Hello, I've set up a vserver, data lif, bucket and user for S3 on my netapp. But I can't seem to connect from the aws cli.

$ cat .aws/config
[default]
s3 =
    signature_version = s3v4

$ aws --endpoint-url https://192.168.x.x --no-verify-ssl s3 ls
urllib3/connectionpool.py:1045: InsecureRequestWarning: Unverified HTTPS request is being made to host '192.168.103.56'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings
urllib3/connectionpool.py:1045: InsecureRequestWarning: Unverified HTTPS request is being made to host '192.168.103.56'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings
urllib3/connectionpool.py:1045: InsecureRequestWarning: Unverified HTTPS request is being made to host '192.168.103.56'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings

An error occurred (InternalError) when calling the ListBuckets operation (reached max retries: 2): We encountered an internal error. Please try again.

Nothing in the ontap events logs to hint at what I'm doing wrong. My user should have FullAccess.

Any hints on what I might be doing wrong?

weak scaffold May 4, 2023, 5:18 PM

#

ok, got an answer from support. You need to set diag in the netapp cli before user show to see the real secret key. The other one is the access id. The username is irrelevant.

#

MCS-KLAB-NETAPP::> set diag

Warning: These diagnostic commands are for use by NetApp personnel only.
Do you want to continue? {y|n}: y

MCS-KLAB-NETAPP::*> vserver object-store-server user show -vserver KLAB_S3 -user steven

                               Vserver Name: KLAB_S3
              Object Store Server User Name: steven
                Object Store Server User ID: 3
       Object Store Server User Description:
Access Key for the Object Store Server User: 6lshB?????
Secret Key for the Object Store Server User: V157p?????

#

This of course isn't documented in the "best practices" guide at all ...

brittle fox May 5, 2023, 3:24 AM

#

Hi @weak scaffold firstly, glad to hear support got you back on track. Regarding your feedback on the best practices guide missing this info, can you let me know which guide you are referring too? Just want to make sure I pass this feedback along to the right place.

#

Often when we close support cases if there was no KB relevant to the issue, we will go ahead and make one, so likely this case will result in a KB being updated or created for this query.

weak scaffold May 16, 2023, 8:20 PM

#

brittle fox Hi <@1075903525386715197> firstly, glad to hear support got you back on track. R...

https://www.netapp.com/media/17219-tr4814.pdf was the guide google found us and we were following. Maybe the info was hiding in there and I just missed it? Perhaps it could be called out more clearly if it is in there?

#

We also found that it is shown behind a link during SVM setup that we just missed

#AWS CLI and S3