Error while trying to use sso to get all the accounts and roles granted to a user

[alexisde]

I'm writting a script to get all the accounts and roles an AWS-sso enabled user is able to access, the process is basically to get the access_token out of the local cache:

fn get_sso_access_token() -> String {
    let cache_path = home::home_dir()
        .unwrap()
        .join(".aws/sso/cache/afb9d1dcf212fa33d079a070ab90f0bef03c324b.json");
    let data: String = fs::read_to_string(cache_path).unwrap();

    let cache: Value = serde_json::from_str(&data).unwrap();
    cache["accessToken"].to_string()
}

Then to use that to generate a call to aws sso list-accounts --access-token <foo>

    let config = aws_config::load_from_env().await;
    let client = aws_sdk_sso::Client::new(&config);

    let sso_access_token: String = get_sso_access_token();

    let _accounts = client
        .list_accounts()
        .access_token(sso_access_token)
        .send()
        .await
        .unwrap();

This is compiling without issues, but when i run i get the following error:

called `Result::unwrap()` on an `Err` value: ServiceError(ServiceError { source: UnauthorizedException(UnauthorizedException { message: Some("Session token not found or invalid"), meta: ErrorMetadata { code: Some("UnauthorizedException"), message: Some("Session token not found or invalid"), extras: Some({"aws_request_id": "b6204051-e80e-42fd-a2fb-82f8a0076a55"}) } }), raw: Response { status: StatusCode(401), headers: Headers { headers: {"date": HeaderValue { _private: H0("Wed, 06 Mar 2024 20:01:24 GMT") }, "content-type": HeaderValue { _private: H0("application/json") }, "content-length": HeaderValue { _private: H0("114") }, "access-control-expose-headers": HeaderValue { _private: H0("RequestId") }, "access-control-expose-headers": HeaderValue { _private: H0("x-amzn-RequestId") }, "requestid": HeaderValue { _private: H0("b6204051-e80e-42fd-a2fb-82f8a0076a55") }, "server": HeaderValue { _private: H0("AWS SSO") }, "x-amzn-requestid": HeaderValue { _private: H0("b6204051-e80e-42fd-a2fb-82f8a0076a55") }} }, body: SdkBody { inner: Once(Some(b"{\"message\":\"Session token not found or invalid\",\"__type\":\"com.amazonaws.switchboard.portal#UnauthorizedException\"}")), retryable: true }, extensions: Extensions { extensions_02x: Extensions, extensions_1x: Extensions } } }

I am able to run the same commands using the aws cli to list the accounts i have access to

I'm in the process of learning rust, so it's entirely possible that the issue is with the use of the client

Thank you!

[alexisde]

the json parsed string came with quote chars

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.