ec2.py auth error when using Boto3 Profiles with SAML Auth and Assumed Role

Archives Ansible Project
1

Hi,

Just trying to see if anyone else has run into this error, these boto profiles work fine for AWS-cli but I get the following error when trying to use ec2.py

python3 ec2.py --profile product-XXXX-XX

Boto configs found at ‘~/.aws/credentials’, but the credentials contained may not be correct", while: getting EC2 instances.

~/.aws/credentials (Scrubbed)

[default]
output = json
region = us-east-1
aws_access_key_id =
aws_secret_access_key =

[product-xxxx-xx]
output = json
region = us-east-1
aws_access_key_id = ASIAJLBHA3FUXXXXXXXX
aws_secret_access_key = /O26NnkyNaQqQ9GxhemAXXXXXXXXXXX
aws_session_token = BLAH==
saml_role_arn = arn:aws:iam::XXXXXXXXX:role/ADFS-Readonly
saml_principal_arn = arn:aws:iam::XXXXXXXXX:saml-provider/ADFS

[product-xxx-xx]
output = json
region = us-east-1
aws_access_key_id = ASIAIAOWQAOIS4I7LSAQ
aws_secret_access_key = buqQQsdHyZrWAYQsn95BTGiXXXXXXXXX
aws_session_token = BLAH==
saml_role_arn = arn:aws:iam::XXXX:role/ADFS-Admin
saml_principal_arn = arn:aws:iam::XXXXX:saml-provider/ADFS

Thanks in advance,

Tony