[Bug]: The assumed role ARN contains a value for resource type different than role, please input a valid ARN about prowler

[LongauerJuraj]

Hi Pepe 👋, so I actually fixed the issue, here is what I did - it was not prowler related.

1. I am using saml2aws tool to establish SSO connection using our SSO Platform Jumpcloud
2. For some reason and this was the root cause for my issue I had this line in my ~/.aws/config file that I commented out
   role_arn = arn:aws:iam:::role/view-only
3. Issue fixed 🎉
   Thanks for reaching out Pepe!

[jfagoagas]

Hi @Hafzan-250601, I can't reproduce the issue on our test environments.

• Can you execute it using the --log-level ERROR flag? Attach the output here please.
• What type credentials are you using to execute it?

Thanks for using Prowler 🚀

[Hafzan-250601]

Hi @jfagoagas I already tried to run prowler with the flag you mentioned but the output still the same

I used aws configure then put in my access key and secret access key

[jfagoagas]

@Hafzan-250601 How did you install Prowler? You said using pip in the issue form but then I realised that you are executing python prowler.py.

I'm trying to reproduce the issue again but I can't do either with the pip version or cloning from the Github master branch.

[Hafzan-250601]

I tried using pip to install prowler but it diddn't work. My bad

[jfagoagas]

@Hafzan-250601 is it now fixed? What was the error installing it through pip?

[Hafzan-250601]

The installation is fine but when i trying to run it said command not found

[jfagoagas]

Probably you don't have the Python in your ${PATH}, could you please check it?

[jfagoagas]

Hi @Hafzan-250601, have you been able to check your ${PATH}?

Could you please share you AWS credentials configuration since it seems that the IAM Role ARN that you are using is not valid.

Thanks!

[LongauerJuraj]

Hi I am actually getting the same error. Here is my setup and what I did...
MaxOS with zsh
Python version 3.1
Added alias that python3 = python into .zshrc file
running prowler aws under root account having keys stored in the aws credential file.

[jfagoagas]

Hi @LongauerJuraj,

• Could you please execute it using the --log-level ERROR flag? Attach the output here please.
• What type credentials are you using to execute it? Please share the keys, not the values, you have configured in your AWS credentials file.

Thanks!

[jfagoagas]

Hi Pepe 👋, so I actually fixed the issue, here is what I did - it was not prowler related.

1. I am using saml2aws tool to establish SSO connection using our SSO Platform Jumpcloud

2. For some reason and this was the root cause for my issue I had this line in my ~/.aws/config file that I commented out

role_arn = arn:aws:iam:::role/view-only

3. Issue fixed 🎉

Thanks for reaching out Pepe!

It's nothing @LongauerJuraj, always here to help!!

Thanks for using Prowler 🚀

[jfagoagas]

Hi @Hafzan-250601, have you been able to check your ${PATH}?

Could you please share you AWS credentials configuration since it seems that the IAM Role ARN that you are using is not valid.

Thanks!

@Hafzan-250601 Have you been able to review this? Please check that out and let us know.

Thanks!

[ta1bbty]

Hey @jfagoagas and @Hafzan-250601 👋
I've just installed prowler and facing the exact same issue. I am using root creds from my account and aws sts get-caller-identity is working fine.

Any suggestions ?
Thank you.

[jfagoagas]

Hi @ta1bbty can you share the execution logs with --log-level ERROR? Also please share with us the arguments passed to Prowler and the contents of your AWS configuration, either in the ~/.aws/config, ~/.aws/credentials or environment variables.

Thanks!

[jfagoagas]

Hi @Hafzan-250601 @ta1bbty do you have any update on this?

Thanks!

[jfagoagas]

Hi @ta1bbty @Hafzan-250601 @LongauerJuraj , we are closing this issue since we didn't receive any response. Please feel free to reopen it if you notice the same behaviour again.

Thanks for using Prowler 🚀