Session issue

[ghost]

Hiya,

I'm writing a simple script where first I get the list of regions where EKS is available and then I want to list all my clusters in those regions. I'm using the assume tool which will export the access key, session token for my SSO role to the ENV variables.

Here's is example code:

import boto3

regions = boto3.Session().get_available_regions('eks')
print(regions)
for region in regions:
    eks_client = boto3.client('eks', region_name=region)
    clusters = eks_client.list_clusters()
    print(clusters)

When I do this, I get the list of regions but then when it tries to list the clusters I get the following error:
botocore.exceptions.ClientError: An error occurred (UnrecognizedClientException) when calling the ListClusters operation: The security token included in the request is invalid

If I were to provide it a manual list like this, the list cluster would work properly

import boto3

regions = ['us-west-2','us-east-1']
print(regions)
for region in regions:
    eks_client = boto3.client('eks', region_name=region)
    clusters = eks_client.list_clusters()['clusters']
    print(clusters)

I've also tried different sessions:

import boto3

region_session = boto3.session.Session()
regions = region_session.get_available_regions("eks")
print(regions)
boto3.setup_default_session()
for region in regions:
    new_session = boto3.session.Session()
    eks = new_session.client("eks")
    clusters = eks.list_clusters()
    print(clusters)

But that prints out the clusters for the default region of my credentials

If I add region_name to the new client or new session, I get the same error as above for the security token

It seems as though after calling session it almost invalidates the session and doesn't read the default creds

Any thoughts?

[RyanFitzSimmonsAK]

Hi @abellpb, thanks for reaching out. I suspect that this is happening because many of the regions returned by get_available_regions('eks') are opt-in regions. Enable those opt-in regions, and this should work fine.

[github-actions]

Hello! A team member has marked the above comment as the likely answer to this discussion thread.

• If you agree, please upvote that comment, or click on Mark as answer. I will automatically mark the comment as the answer next time I check.

• If this answer does not help you, please downvote the answer instead and let us know why it was not helpful. I will add a label to this discussion to gain attention from the team.

[github-actions[bot]]

Closing the discussion for staleness. Please open a new discussion if you have further concerns.

[github-actions[bot]]

Closing the discussion for staleness. Please open a new discussion if you have further concerns.

[github-actions[bot]]

Closing the discussion for staleness. Please open a new discussion if you have further concerns.