# Need a help to create S3 bucket using Ansible **URL:** \ **Category:** Ansible Project\ **Tags:** aws\ **Created:** [August 23, 2019, 12:27am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106 "2019-08-23T00:27:42Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 23, 2019, 12:27am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/1 "2019-08-23T00:27:42Z")
Hi All, Need urgent help I am getting below error while creating S3 bucket using playbook. AWS keys I have set up as Environmental variables. Let me know if I am missing anything. Below is the playbbok ---
**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\ **Post date:** [August 23, 2019, 9:04am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/2 "2019-08-23T09:04:42Z")
Not sure but could it be an issue that your environment vars are lowercase? I know that the awscli tools expect them in uppercase. ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 23, 2019, 10:40am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/3 "2019-08-23T10:40:19Z")
Any update,this is little urgent for ne ---
**Author:** ![Dick\_Visser](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@Dick\_Visser](https://forum.ansible.com/u/Dick_Visser)\ **Post date:** [August 23, 2019, 1:21pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/4 "2019-08-23T13:21:33Z")
> Hi All, > > Need urgent help I am getting below error while creating S3 bucket using playbook. > > AWS keys I have set up as Environmental variables. > > Let me know if I am missing anything. > > Below is the playbbok > > --- > - hosts: localhost >   tasks: >     - name: Create an empty bucket >        aws\_s3: >           aws\_access\_key: "{{ lookup('env','aws\_key') }}" >           aws\_secret\_key: "{{ lookup('env','aws\_secret') }}" You look up environment vars here > NoCredentialsError: Unable to locate credentials > fatal: [localhost]: FAILED! =\> { >     "boto3\_version": "1.9.212", >     "botocore\_version": "1.12.212", >     "changed": false, >     "invocation": { >         "module\_args": { >             "aws\_access\_key": "", >             "aws\_secret\_key": "", But the lookup fails, they're NOT in your environment. So, what have you actually done when you say "AWS keys I have set up as Environmental variables. "? ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 23, 2019, 1:27pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/5 "2019-08-23T13:27:10Z")
Thanks for the response. I have used export commands to set up both aws keys. Let me know if I am missing anything here Regards Amit ---
**Author:** ![Tim1](https://avatars.discourse-cdn.com/v4/letter/t/b782af/32.png) [@Tim1](https://forum.ansible.com/u/Tim1)\ **Post date:** [August 23, 2019, 1:38pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/6 "2019-08-23T13:38:02Z")
I had something like this happen to me recently when using ‘become’ in my playbook. It may be you’re having a similar problem with your use of sudo. You’re logged in as the ubuntu user (presumably where you have these env vars set…via a bash unit script or via export or something) but your use of sudo is causing the playbook to be executed as the root user when Ansible runs the play. Presumably there are no env vars configured for root and thus the modules inability to find anything. So suggest you export your env vars in the root users config. Alternatively, create .aws/config and .aws/credentials as the root user. Or, try removing your use of sudo if your org’s security policy allows -tim ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 23, 2019, 2:21pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/7 "2019-08-23T14:21:46Z")
Thanks Tim. I will try to run export commands using sudo and let you know. If you have any idea on ansible vault please let me know, I tried to use that initially but I am not able to use vault file in my playbook Amit ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 23, 2019, 2:47pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/8 "2019-08-23T14:47:26Z")
Hi Tim, I tried to run export command using sudo but it says sudo expect command not found ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 24, 2019, 5:14pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/9 "2019-08-24T17:14:47Z")
Helllo All, I am able to overcome the credentials issue however now playbook is failing with below issue. root@ip-172-31-42-232:/etc/ansible# ansible-playbook s3.yml -vvv ansible-playbook 2.8.3 config file = /etc/ansible/ansible.cfg configured module search path = [u’/root/.ansible/plugins/modules’, u’/usr/share/ansible/plugins/modules’] ansible python module location = /usr/lib/python2.7/dist-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0 20160609] Using /etc/ansible/ansible.cfg as config file host\_list declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method script declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method auto declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method Parsed /etc/ansible/hosts inventory source with ini plugin PLAYBOOK: s3.yml \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 1 plays in s3.yml PLAY [localhost] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* TASK [Gathering Facts] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* task path: /etc/ansible/s3.yml:2 \<127.0.0.1\> ESTABLISH LOCAL CONNECTION FOR USER: root \<127.0.0.1\> EXEC /bin/sh -c ‘echo ~root && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘( umask 77 && mkdir -p “`echo /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244`” && echo ansible-tmp-1566666456.61-207096775443244=“`echo /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244`” ) && sleep 0’ Using module file /usr/lib/python2.7/dist-packages/ansible/modules/system/setup.py \<127.0.0.1\> PUT /root/.ansible/tmp/ansible-local-2270DRSES3/tmpP8YUvk TO /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244/AnsiballZ\_setup.py \<127.0.0.1\> EXEC /bin/sh -c ‘chmod u+x /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244/ /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244/AnsiballZ\_setup.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘/usr/bin/python /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244/AnsiballZ\_setup.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘rm -f -r /root/.ansible/tmp/ansible-tmp-1566666456.61-207096775443244/ \> /dev/null 2\>&1 && sleep 0’ ok: [localhost] META: ran handlers TASK [Create an empty bucket] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* task path: /etc/ansible/s3.yml:4 \<127.0.0.1\> ESTABLISH LOCAL CONNECTION FOR USER: root \<127.0.0.1\> EXEC /bin/sh -c ‘echo ~root && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘( umask 77 && mkdir -p “`echo /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797`” && echo ansible-tmp-1566666457.49-233501371669797=“`echo /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797`” ) && sleep 0’ Using module file /usr/lib/python2.7/dist-packages/ansible/modules/cloud/amazon/aws\_s3.py \<127.0.0.1\> PUT /root/.ansible/tmp/ansible-local-2270DRSES3/tmpFtWTLO TO /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797/AnsiballZ\_aws\_s3.py \<127.0.0.1\> EXEC /bin/sh -c ‘chmod u+x /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797/ /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797/AnsiballZ\_aws\_s3.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘/usr/bin/python /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797/AnsiballZ\_aws\_s3.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘rm -f -r /root/.ansible/tmp/ansible-tmp-1566666457.49-233501371669797/ \> /dev/null 2\>&1 && sleep 0’ The full traceback is: Traceback (most recent call last): File “/tmp/ansible\_aws\_s3\_payload\_SEbdSf/ **main**.py”, line 384, in bucket\_check s3.head\_bucket(Bucket=bucket) File “/usr/local/lib/python2.7/dist-packages/botocore/client.py”, line 357, in \_api\_call return self.\_make\_api\_call(operation\_name, kwargs) File “/usr/local/lib/python2.7/dist-packages/botocore/client.py”, line 661, in \_make\_api\_call raise error\_class(parsed\_response, operation\_name) ClientError: An error occurred (403) when calling the HeadBucket operation: Forbidden fatal: [localhost]: FAILED! =\> { “boto3\_version”: “1.9.212”, “botocore\_version”: “1.12.212”, “changed”: false, “error”: { “code”: “403”, “message”: “Forbidden” }, “invocation”: { “module\_args”: { “aws\_access\_key”: “”, “aws\_secret\_key”: “”, “bucket”: “mybucket”, “debug\_botocore\_endpoint\_logs”: false, “dest”: null, “dualstack”: false, “ec2\_url”: null, “encrypt”: true, “encryption\_kms\_key\_id”: null, “encryption\_mode”: “AES256”, “expiry”: 600, “headers”: null, “ignore\_nonexistent\_bucket”: false, “marker”: “”, “max\_keys”: 1000, “metadata”: null, “mode”: “create”, “object”: null, “overwrite”: “always”, “permission”: [ “public-read” ], “prefix”: “”, “profile”: null, “region”: “us-east-2”, “retries”: 0, “rgw”: false, “s3\_url”: null, “security\_token”: null, “src”: null, “validate\_certs”: true, “version”: null } }, “msg”: “Failed while looking up bucket (during bucket\_check) mybucket.: An error occurred (403) when calling the HeadBucket operation: Forbidden”, “response\_metadata”: { “host\_id”: “Y5EoHU94wSLzLN+iN7SDshJFmR78udMNnDpxUI13jVTTLVP5RQCS5oEYjmpB8o5JhejR8cuAB4w=”, “http\_headers”: { “content-type”: “application/xml”, “date”: “Sat, 24 Aug 2019 17:07:37 GMT”, “server”: “AmazonS3”, “transfer-encoding”: “chunked”, “x-amz-bucket-region”: “us-east-1”, “x-amz-id-2”: “Y5EoHU94wSLzLN+iN7SDshJFmR78udMNnDpxUI13jVTTLVP5RQCS5oEYjmpB8o5JhejR8cuAB4w=”, “x-amz-request-id”: “73D609B218DBD779” }, “http\_status\_code”: 403, “request\_id”: “73D609B218DBD779”, “retry\_attempts”: 1 } } PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* localhost : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0 Below is the playbook i have written to create the bucket ---
**Author:** ![Karthik\_Chandrasheka](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Karthik\_Chandrasheka](https://forum.ansible.com/u/Karthik_Chandrasheka)\ **Post date:** [August 24, 2019, 5:23pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/10 "2019-08-24T17:23:22Z")
@amit, Can you try with different bucket name once. Remember AWS S3 bucket names must be unique. ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 12:04am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/11 "2019-08-25T00:04:47Z")
Hello All, I tried to change the bucket name and ran my playbook, but its failing with same error. I even specified the region as my EC2 instance but still its failing. Below are my boto versions boto3 (1.9.212) botocore (1.12.215) Please suggest if i am doing something wrong here. I have also attached s3 full access policy to my IAM user. I am running this playbook as root user and my IAM user name is ansible. root@ip-172-31-42-232:/etc/ansible# ansible-playbook s3.yml -vvv ansible-playbook 2.8.3 config file = /etc/ansible/ansible.cfg configured module search path = [u’/root/.ansible/plugins/modules’, u’/usr/share/ansible/plugins/modules’] ansible python module location = /usr/lib/python2.7/dist-packages/ansible executable location = /usr/bin/ansible-playbook python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0 20160609] Using /etc/ansible/ansible.cfg as config file host\_list declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method script declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method auto declined parsing /etc/ansible/hosts as it did not pass it’s verify\_file() method Parsed /etc/ansible/hosts inventory source with ini plugin PLAYBOOK: s3.yml \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* 1 plays in s3.yml PLAY [localhost] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* TASK [Gathering Facts] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* task path: /etc/ansible/s3.yml:2 \<127.0.0.1\> ESTABLISH LOCAL CONNECTION FOR USER: root \<127.0.0.1\> EXEC /bin/sh -c ‘echo ~root && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘( umask 77 && mkdir -p “`echo /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659`” && echo ansible-tmp-1566690636.74-275478344374659=“`echo /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659`” ) && sleep 0’ Using module file /usr/lib/python2.7/dist-packages/ansible/modules/system/setup.py \<127.0.0.1\> PUT /root/.ansible/tmp/ansible-local-3920YJ0Dzu/tmppvx33n TO /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659/AnsiballZ\_setup.py \<127.0.0.1\> EXEC /bin/sh -c ‘chmod u+x /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659/ /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659/AnsiballZ\_setup.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘/usr/bin/python /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659/AnsiballZ\_setup.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘rm -f -r /root/.ansible/tmp/ansible-tmp-1566690636.74-275478344374659/ \> /dev/null 2\>&1 && sleep 0’ ok: [localhost] META: ran handlers TASK [Create an empty bucket] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* task path: /etc/ansible/s3.yml:4 \<127.0.0.1\> ESTABLISH LOCAL CONNECTION FOR USER: root \<127.0.0.1\> EXEC /bin/sh -c ‘echo ~root && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘( umask 77 && mkdir -p “`echo /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258`” && echo ansible-tmp-1566690637.52-181677931604258=“`echo /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258`” ) && sleep 0’ Using module file /usr/lib/python2.7/dist-packages/ansible/modules/cloud/amazon/aws\_s3.py \<127.0.0.1\> PUT /root/.ansible/tmp/ansible-local-3920YJ0Dzu/tmpICazr3 TO /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258/AnsiballZ\_aws\_s3.py \<127.0.0.1\> EXEC /bin/sh -c ‘chmod u+x /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258/ /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258/AnsiballZ\_aws\_s3.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘/usr/bin/python /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258/AnsiballZ\_aws\_s3.py && sleep 0’ \<127.0.0.1\> EXEC /bin/sh -c ‘rm -f -r /root/.ansible/tmp/ansible-tmp-1566690637.52-181677931604258/ \> /dev/null 2\>&1 && sleep 0’ The full traceback is: Traceback (most recent call last): File “/tmp/ansible\_aws\_s3\_payload\_AzOF0F/ **main**.py”, line 384, in bucket\_check s3.head\_bucket(Bucket=bucket) File “/root/.local/lib/python2.7/site-packages/botocore/client.py”, line 357, in \_api\_call return self.\_make\_api\_call(operation\_name, kwargs) File “/root/.local/lib/python2.7/site-packages/botocore/client.py”, line 661, in \_make\_api\_call raise error\_class(parsed\_response, operation\_name) ClientError: An error occurred (403) when calling the HeadBucket operation: Forbidden fatal: [localhost]: FAILED! =\> { “boto3\_version”: “1.9.212”, “botocore\_version”: “1.12.215”, “changed”: false, “error”: { “code”: “403”, “message”: “Forbidden” }, “invocation”: { “module\_args”: { “aws\_access\_key”: “”, “aws\_secret\_key”: “”, “bucket”: “vinali”, “debug\_botocore\_endpoint\_logs”: false, “dest”: null, “dualstack”: false, “ec2\_url”: null, “encrypt”: true, “encryption\_kms\_key\_id”: null, “encryption\_mode”: “AES256”, “expiry”: 600, “headers”: null, “ignore\_nonexistent\_bucket”: false, “marker”: “”, “max\_keys”: 1000, “metadata”: null, “mode”: “create”, “object”: null, “overwrite”: “always”, “permission”: [ “public-read” ], “prefix”: “”, “profile”: null, “region”: “us-east-2”, “retries”: 0, “rgw”: false, “s3\_url”: null, “security\_token”: null, “src”: null, “validate\_certs”: true, “version”: null } }, “msg”: “Failed while looking up bucket (during bucket\_check) vinali.: An error occurred (403) when calling the HeadBucket operation: Forbidden”, “response\_metadata”: { “host\_id”: “HynfxcD919dq4ThF71VTbvEHK5lTdSLqJtDqrLf1SCSaJAWzg7K4CRB5qzOHQH5bGsPSpkM28rM=”, “http\_headers”: { “content-type”: “application/xml”, “date”: “Sat, 24 Aug 2019 23:50:37 GMT”, “server”: “AmazonS3”, “transfer-encoding”: “chunked”, “x-amz-id-2”: “HynfxcD919dq4ThF71VTbvEHK5lTdSLqJtDqrLf1SCSaJAWzg7K4CRB5qzOHQH5bGsPSpkM28rM=”, “x-amz-request-id”: “103457AA674E483D” }, “http\_status\_code”: 403, “request\_id”: “103457AA674E483D”, “retry\_attempts”: 0 } } PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* localhost : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0 Regards Amit ---
**Author:** ![Karl\_Auer](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Karl\_Auer](https://forum.ansible.com/u/Karl_Auer)\ **Post date:** [August 25, 2019, 12:38am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/12 "2019-08-25T00:38:08Z")
I haven’t had a close look, but I think the problem is that while you are logged in as ansible, your playbook thn connects to localhost as root. and root does not have AWS credentials set up. From your output: […] ESTABLISH LOCAL CONNECTION FOR USER: root […] NoCredentialsError: Unable to locate credentials […] In general, when running Ansible on a local host to change AWS resources (rather than running a play on a remote host), you don’t need to become a different user. So try just running the playbook on localhost as user “ansible” (assuming that you have AWS credentials set up for “ansible” of course. Alternatively, log in as root and set up AWS credentials in the root account on localhost. Not really a recommended approach. For most of my playbooks that work with AWS infrastructure, I run them as a user with suitable AWS credentials, and the playbooks start like this: ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 12:42am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/13 "2019-08-25T00:42:03Z")
I was able to over the credentials issue But getting 403 error as head bucket forbidden issue. Regards Amit ---
**Author:** ![Karl\_Auer](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Karl\_Auer](https://forum.ansible.com/u/Karl_Auer)\ **Post date:** [August 25, 2019, 12:56am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/14 "2019-08-25T00:56:51Z")
More info needed. Check the credentials you are using and the permissions they provide. Regards, K. ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 1:02am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/15 "2019-08-25T01:02:08Z")
IAM user has full permission on S3. Let me know what additional information needed. Regards Amit ---
**Author:** ![Karl\_Auer](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Karl\_Auer](https://forum.ansible.com/u/Karl_Auer)\ **Post date:** [August 25, 2019, 1:30am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/16 "2019-08-25T01:30:35Z")
If you are getting a 403 error, then either you don’t have the permissions you think you do, or you are not accessing AWS as the user you think you are. Carry out the desired operation using the command line while logged in (to localhost) as the user you think Ansible is using. If that works, then you 100% are using a different user in Ansible. If it doesn’t work, then you don’t have the permissions you think you do. For example, while logged in locally as “ansible”: ```auto aws s3 mb s3://this_is_amits_bucket aws s3api head-bucket --bucket this_is_amits_bucket ``` If the bucket already exists, just use the second command. Depending on how you have set up your AWS credentials, you may need to add “–profile whatever” to the commands, and possibly also “–region whatever”. One other possibility is that the credentials the “ansible” user is using are set up with MFA in AWS. If that’s the case, the above commands will prompt you for an MFA code. Regards, K. ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 1:52am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/17 "2019-08-25T01:52:03Z")
Thanks Karl. I having this confusion. I am logging in by root user however IAM user is ansible and I am using it’s credentials for export. How to rectify this? Do you suggest to create root as user in IAM to avoid the confusion Regards Amit ---
**Author:** ![Karl\_Auer](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Karl\_Auer](https://forum.ansible.com/u/Karl_Auer)\ **Post date:** [August 25, 2019, 2:36am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/18 "2019-08-25T02:36:38Z")
So I understand that these things are true: 1: You are logged into localhost as “root” 2: You are running Ansible as local user “root” 3: There is an IAM user called “ansible” 4: IAM user “ansible” has the necessary permissions You have set up a suitable user in AWS (“ansible”). now you have to make sure that the local user running Ansible (in your case “root”) has access to the credentials locally, so that it can supply them to AWS as needed. There is no need to create any new IAM users. Typically you would (as the user running Ansible on your local host, so in your case as “root”) run “aws configure” and then ensure that the right credentials are in ~root/.aws/config and ~root/.aws/credentials. You do not HAVE to install the AWS CLI to use Ansible. One alternative is to set all the required environment variables in your shell before running Ansible. At a minimum you need these: export AWS\_ACCESS\_KEY\_ID=xxxxxxxxxx export AWS\_SECRET\_ACCESS\_KEY=yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy Many things expect AWS\_REGION as well. All this is extensively documented in the Ansible documentation. There is little point trying to run Ansible until you have tested that the user you are running Ansible as (in your case root) can provide the required AWS access credentials. For this reason I suggest installing the AWS CLI sure that you can do simple things like create and list buckets. Regards, K. ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 2:42am UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/19 "2019-08-25T02:42:37Z")
Thank you so much. I will try it and give you feedback Have a good night Regards Amit ---
**Author:** ![Amit\_Kulkarni](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Amit\_Kulkarni](https://forum.ansible.com/u/Amit_Kulkarni)\ **Post date:** [August 25, 2019, 2:50pm UTC](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106/20 "2019-08-25T14:50:08Z")
Hi I have gone through the reply. I am using export commands already but despite that I am facing headbucket issue and error code is 403 I have also installed AWS cli however it’s still not recognizing aws command and I am getting aws command not found error when I am running any aws commands Let me know if any suggestions from your end Regards Amit [Next page](https://forum.ansible.com/t/need-a-help-to-create-s3-bucket-using-ansible/31106.md?page=2)