# \#aws **URL:** https://discuss.circleci.com/tag/aws/90.md [Latest](https://discuss.circleci.com/latest.md) · [Categories](https://discuss.circleci.com/categories.md) · [Tags](https://discuss.circleci.com/tags.md) --- ## [Build docker image in self-hosted runner](https://discuss.circleci.com/t/build-docker-image-in-self-hosted-runner/52639)
**Author:** [@varontron](https://discuss.circleci.com/u/varontron)\ **Replies:** 2\ **Last updated:** [January 21, 2025, 11:55pm UTC](https://discuss.circleci.com/t/build-docker-image-in-self-hosted-runner/52639 "2025-01-21T23:55:00Z")
Hi, I have a self-hosted runner hosted in EKS. All is well, except I can’t get it to build a docker image. It needs to happen in EKS because the image includes an internally hosted private python package. The base im… --- ## [Can an AWS Secret be used in Build?](https://discuss.circleci.com/t/can-an-aws-secret-be-used-in-build/52561)
**Author:** [@JeffWard](https://discuss.circleci.com/u/JeffWard)\ **Replies:** 1\ **Last updated:** [January 3, 2025, 11:31pm UTC](https://discuss.circleci.com/t/can-an-aws-secret-be-used-in-build/52561 "2025-01-03T23:31:14Z")
I have a secret stored in AWS Secrets manager. I have a need to grab this secret in Circle and store it as an ENV to be used later in the job passing the secret into the ‘docker build --secret …’ AI is telling me to use… --- ## [Not authorized to perform sts:AssumeRoleWithWebIdentity](https://discuss.circleci.com/t/not-authorized-to-perform-sts-assumerolewithwebidentity/52210)
**Author:** [@the-noob](https://discuss.circleci.com/u/the-noob)\ **Replies:** 0\ **Last updated:** [October 25, 2024, 1:10pm UTC](https://discuss.circleci.com/t/not-authorized-to-perform-sts-assumerolewithwebidentity/52210 "2024-10-25T13:10:23Z")
I’m struggling to figure out what’s the problem with my approaches, as they both hit (almost) the same error for no reason. First I had the following command: build\_and\_push\_ecr\_image: description: "Build and pus… --- ## [Migrate DB via CircleCI test & build pipeline to AWS RDS](https://discuss.circleci.com/t/migrate-db-via-circleci-test-build-pipeline-to-aws-rds/52185)
**Author:** [@kmarshall008](https://discuss.circleci.com/u/kmarshall008)\ **Replies:** 0\ **Last updated:** [October 18, 2024, 9:52pm UTC](https://discuss.circleci.com/t/migrate-db-via-circleci-test-build-pipeline-to-aws-rds/52185 "2024-10-18T21:52:13Z")
We are trying to set up an automated pipeline in CircleCI to manage migrations for an AWS RDS instance using Alembic. Despite configuring jobs in .circleci/config.yml for building, testing database connectivity, and appl… --- ## [Credentials error with AWS EKS](https://discuss.circleci.com/t/credentials-error-with-aws-eks/52023)
**Author:** [@Component1955](https://discuss.circleci.com/u/Component1955)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 5:36pm UTC](https://discuss.circleci.com/t/credentials-error-with-aws-eks/52023 "2024-09-24T17:36:34Z")
I have a CircleCI user and an associated role setup in AWS to deploy to the ECR and EKS. The images are being pushed to ECR just fine. Somewhat related, but the same role and user are used to access services in AWS when … --- ## [Error when building Docker image on Alpine using aws-ecr orb](https://discuss.circleci.com/t/error-when-building-docker-image-on-alpine-using-aws-ecr-orb/51047)
**Author:** [@fatmcgav](https://discuss.circleci.com/u/fatmcgav)\ **Replies:** 3\ **Last updated:** [May 31, 2024, 8:43am UTC](https://discuss.circleci.com/t/error-when-building-docker-image-on-alpine-using-aws-ecr-orb/51047 "2024-05-31T08:43:22Z")
Hey there I’m currently trying to update some of our existing CircleCI build pipelines to use AWS OIDC authentication in order to remove some static AWS credentials. This is working great for our Helm deployments, howe… --- ## [How to authenticate circleci/helm to upgrade\_helm\_chart?](https://discuss.circleci.com/t/how-to-authenticate-circleci-helm-to-upgrade-helm-chart/50874)
**Author:** [@hokiau-smoooth](https://discuss.circleci.com/u/hokiau-smoooth)\ **Replies:** 0\ **Last updated:** [April 29, 2024, 7:13am UTC](https://discuss.circleci.com/t/how-to-authenticate-circleci-helm-to-upgrade-helm-chart/50874 "2024-04-29T07:13:25Z")
I was trying to use the circleci/helm orb to upgrade a chart on an kubernetes cluster deployed on aws. the steps go like this: - aws-cli/setup: aws\_access\_key\_id: AWS\_ACCESS\_KEY\_ID aws\_secret\_access\_key: AWS\_SECRET\_A… --- ## [AWS OIDC and role\_arn interpolation](https://discuss.circleci.com/t/aws-oidc-and-role-arn-interpolation/50589)
**Author:** [@fatmcgav](https://discuss.circleci.com/u/fatmcgav)\ **Replies:** 1\ **Last updated:** [February 28, 2024, 2:00pm UTC](https://discuss.circleci.com/t/aws-oidc-and-role-arn-interpolation/50589 "2024-02-28T14:00:58Z")
Hey, I’m trying to get CircleCI to talk to AWS using OIDC and assumed roles. However the challenge I’m hitting is that I need to be able to interpolate the role\_arn value. I’ve posted more details over on the aws-cli-… --- ## [Aws-ecr orb 9.0.2 doesn't handle shell snippets in tags anymore?](https://discuss.circleci.com/t/aws-ecr-orb-9-0-2-doesnt-handle-shell-snippets-in-tags-anymore/50313)
**Author:** [@dprice1](https://discuss.circleci.com/u/dprice1)\ **Replies:** 3\ **Last updated:** [February 7, 2024, 7:40am UTC](https://discuss.circleci.com/t/aws-ecr-orb-9-0-2-doesnt-handle-shell-snippets-in-tags-anymore/50313 "2024-02-07T07:40:16Z")
I’m attempting to update aws-ecr orb version 8.x to 9.0.2. I’m running into some issues with tags. Previously we had: tag: "$(git log --pretty=format:'%ad' --date=iso -n 1| awk '{print $1}'|tr '-' '.')-$CIRCLE\_BUILD\_NUM… --- ## [Aws-ecr: migration guide for v8 to v9?](https://discuss.circleci.com/t/aws-ecr-migration-guide-for-v8-to-v9/49012)
**Author:** [@nchpf](https://discuss.circleci.com/u/nchpf)\ **Replies:** 1\ **Last updated:** [January 21, 2024, 3:33am UTC](https://discuss.circleci.com/t/aws-ecr-migration-guide-for-v8-to-v9/49012 "2024-01-21T03:33:06Z")
Hi! we’re having a hard time upgrading our orb aws-ecr from v8 to v9, is anyone aware of a simple migration guide? There’s definitely more than just renaming some jobs and properties. The best we could do still ended wi… --- ## [How to update an ECS task with image digest using deploy-service-update job](https://discuss.circleci.com/t/how-to-update-an-ecs-task-with-image-digest-using-deploy-service-update-job/50148)
**Author:** [@CaryPeeblesFT](https://discuss.circleci.com/u/CaryPeeblesFT)\ **Replies:** 0\ **Last updated:** [January 2, 2024, 4:52pm UTC](https://discuss.circleci.com/t/how-to-update-an-ecs-task-with-image-digest-using-deploy-service-update-job/50148 "2024-01-02T16:52:26Z")
I am using circleci/aws-ecr build\_and\_test job to deploy a new image for my project and then trying to use circleci/aws-ecs deploy-service-update job to update the task def and service. This works if I use a common tag b… --- ## [Why does the circleci/aws-ecr@8.2.1 orb push multiple artifacts to a private repository?](https://discuss.circleci.com/t/why-does-the-circleci-aws-ecr-8-2-1-orb-push-multiple-artifacts-to-a-private-repository/48772)
**Author:** [@adam-alula](https://discuss.circleci.com/u/adam-alula)\ **Replies:** 7\ **Last updated:** [August 1, 2023, 8:33pm UTC](https://discuss.circleci.com/t/why-does-the-circleci-aws-ecr-8-2-1-orb-push-multiple-artifacts-to-a-private-repository/48772 "2023-08-01T20:33:25Z")
Hello all. I use the aws-ecr@8.2.1 orb, specifically the build-and-push-image job to send Docker images to a private repository in the AWS ECR. When looking at my repository, I noticed that each execution of the build-an… --- ## [Docker build, tag, deploy](https://discuss.circleci.com/t/docker-build-tag-deploy/47589)
**Author:** [@jlourenco](https://discuss.circleci.com/u/jlourenco)\ **Replies:** 1\ **Last updated:** [July 17, 2023, 10:32pm UTC](https://discuss.circleci.com/t/docker-build-tag-deploy/47589 "2023-07-17T22:32:11Z")
Hey, I’m trying to build and tag a container using aws ecr and then deploying it but I’m having difficulties getting the sha of the tagged container. This is my yaml. version: 2.1 orbs: aws-ecr: circleci/aws-ecr@… --- ## [Using OIDC with AWS and aws orbs](https://discuss.circleci.com/t/using-oidc-with-aws-and-aws-orbs/46845)
**Author:** [@andrei-dascalu](https://discuss.circleci.com/u/andrei-dascalu)\ **Replies:** 6\ **Last updated:** [June 7, 2023, 2:12pm UTC](https://discuss.circleci.com/t/using-oidc-with-aws-and-aws-orbs/46845 "2023-06-07T14:12:34Z")
Hello, I’ve followed the steps at Using OpenID Connect identity tokens to authenticate jobs with cloud providers | CircleCI to setup a pipeline that would use AWS OIDC to assume an AWS role. My config looks like this: … --- ## [Question about circleci/aws-cli@4.0.0 executor docs](https://discuss.circleci.com/t/question-about-circleci-aws-cli-4-0-0-executor-docs/48242)
**Author:** [@TAKAyukiatkwsk](https://discuss.circleci.com/u/TAKAyukiatkwsk)\ **Replies:** 0\ **Last updated:** [June 1, 2023, 2:14am UTC](https://discuss.circleci.com/t/question-about-circleci-aws-cli-4-0-0-executor-docs/48242 "2023-06-01T02:14:35Z")
Hi, circleci/aws-cli@4.0.0 executor docs says it uses cimg/python and able to select Python version, but actually it uses cimg/base image. description: \> Highly cached minimal Ubuntu docker designed for CircleCI with… --- ## [How to restrict OIDC on AWS from a context](https://discuss.circleci.com/t/how-to-restrict-oidc-on-aws-from-a-context/48128)
**Author:** [@mauroj](https://discuss.circleci.com/u/mauroj)\ **Replies:** 0\ **Last updated:** [May 19, 2023, 6:31pm UTC](https://discuss.circleci.com/t/how-to-restrict-oidc-on-aws-from-a-context/48128 "2023-05-19T18:31:04Z")
Hello, The document " Using OpenID Connect Tokens in Jobs" describes how to setup OIDC with AWS, and topic 44226 is a great guide. The former page also documents an additional claim for context-ids, and I would like to… --- ## [OIDC session-duration type bug](https://discuss.circleci.com/t/oidc-session-duration-type-bug/47852)
**Author:** [@akmodsy](https://discuss.circleci.com/u/akmodsy)\ **Replies:** 0\ **Last updated:** [April 21, 2023, 3:29pm UTC](https://discuss.circleci.com/t/oidc-session-duration-type-bug/47852 "2023-04-21T15:29:50Z")
Hi, one of my builds took a little longer and it revealed a problem with my AWS OIDC session token. The token expired before the pipeline was able to make the required calls. I’ve decided to update my pipeline configurat… --- ## [Rust Project: Build and Push image to ECR](https://discuss.circleci.com/t/rust-project-build-and-push-image-to-ecr/46790)
**Author:** [@bitterman](https://discuss.circleci.com/u/bitterman)\ **Replies:** 1\ **Last updated:** [January 20, 2023, 6:25am UTC](https://discuss.circleci.com/t/rust-project-build-and-push-image-to-ecr/46790 "2023-01-20T06:25:58Z")
Hi, I am trying to build my rust project and push it against a repository in aws ecr using the orb aws-ecr: circleci/aws-ecr@8.1.2. The problem is that in my cargo.toml file it references private dependencies, I have li… --- ## [Access Denied while asumeroleWithWebIdentity into AWS](https://discuss.circleci.com/t/access-denied-while-asumerolewithwebidentity-into-aws/46372)
**Author:** [@david68cu](https://discuss.circleci.com/u/david68cu)\ **Replies:** 0\ **Last updated:** [December 18, 2022, 2:23pm UTC](https://discuss.circleci.com/t/access-denied-while-asumerolewithwebidentity-into-aws/46372 "2022-12-18T14:23:02Z")
Hello: I’m getting access denied when trying to ssumeRoleWithWebIdentity into AWS Heres is the OpeIdResource I created and the policy class AuthStack(Stack): def \_\_init\_\_(self, scope: Construct, construct\_id: str, … --- ## [Update published AWS s3 orb](https://discuss.circleci.com/t/update-published-aws-s3-orb/46246)
**Author:** [@markreynolds2](https://discuss.circleci.com/u/markreynolds2)\ **Replies:** 1\ **Last updated:** [December 6, 2022, 10:59am UTC](https://discuss.circleci.com/t/update-published-aws-s3-orb/46246 "2022-12-06T10:59:56Z")
The latest current public aws-s3 orb appears to be circleci/aws-s3@3.0.0 where as the latest version in GitHub - CircleCI-Public/aws-s3-orb: Integrate Amazon AWS S3 with your CircleCI CI/CD pipeline easily with the aws-s… --- ## [AWS Python SDK - Sending CLI Commands](https://discuss.circleci.com/t/aws-python-sdk-sending-cli-commands/45840)
**Author:** [@veera\_RVR](https://discuss.circleci.com/u/veera_RVR)\ **Replies:** 0\ **Last updated:** [October 21, 2022, 5:38am UTC](https://discuss.circleci.com/t/aws-python-sdk-sending-cli-commands/45840 "2022-10-21T05:38:31Z")
I know the AWS Python SDK (Boto/Boto3) has resources for the various AWS services (Resources — Boto3 Docs 1.24.95 documentation) but I’m wondering if there’s a resource to send a straight AWS CLI command e.g., so I can c… --- ## [Provided region\_name 'AWS\_REGION' doesn't match a supported format](https://discuss.circleci.com/t/provided-region-name-aws-region-doesnt-match-a-supported-format/45697)
**Author:** [@Tolosa527](https://discuss.circleci.com/u/Tolosa527)\ **Replies:** 2\ **Last updated:** [October 18, 2022, 7:56am UTC](https://discuss.circleci.com/t/provided-region-name-aws-region-doesnt-match-a-supported-format/45697 "2022-10-18T07:56:05Z")
Hello! I am trying to push an image to AWS-ECR but in the log I have the following error: Provided region\_name ‘AWS\_REGION’ doesn’t match a supported format This is an snippet of how I configure the .yml file - aws-e… --- ## [Pushing to AWS ECR repo using ecr orb 8.1.2](https://discuss.circleci.com/t/pushing-to-aws-ecr-repo-using-ecr-orb-8-1-2/44855)
**Author:** [@CamrenLandry](https://discuss.circleci.com/u/CamrenLandry)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 6:50pm UTC](https://discuss.circleci.com/t/pushing-to-aws-ecr-repo-using-ecr-orb-8-1-2/44855 "2022-07-28T18:50:23Z")
\#!/bin/bash -eo pipefail #!/bin/bash PARAM\_REGION=$(eval echo “${PARAM\_REGION}”) PARAM\_ACCOUNT\_URL=“${!PARAM\_REGISTRY\_ID}.dkr.ecr.${PARAM\_REGION}.amazonaws.com” ECR\_COMMAND=“ecr” if \[ “$PARAM\_PUBLIC\_REGISTRY” == “1”… --- ## [Aws s3 orb are active?](https://discuss.circleci.com/t/aws-s3-orb-are-active/44767)
**Author:** [@cesarcelism](https://discuss.circleci.com/u/cesarcelism)\ **Replies:** 1\ **Last updated:** [July 21, 2022, 2:11pm UTC](https://discuss.circleci.com/t/aws-s3-orb-are-active/44767 "2022-07-21T14:11:19Z")
Hi! the project aws-s3-orb is active? I left a PR a couple of months ago and still doesn’t reviewed kind regards --- ## [The canonical way to deploy Rails app to ECR with buildpacks](https://discuss.circleci.com/t/the-canonical-way-to-deploy-rails-app-to-ecr-with-buildpacks/44457)
**Author:** [@mladenoff](https://discuss.circleci.com/u/mladenoff)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 11:29pm UTC](https://discuss.circleci.com/t/the-canonical-way-to-deploy-rails-app-to-ecr-with-buildpacks/44457 "2022-06-16T23:29:55Z")
We are changing hosting platforms and due to time restrictions, we want to continue to build our Rails app with buildpacks rather than going fully to a Dockerfile. We are aren’t looking to just push the code to AWS and … --- ## [Aws s3 suddenly failing with "Unable to locate credentials"](https://discuss.circleci.com/t/aws-s3-suddenly-failing-with-unable-to-locate-credentials/44416)
**Author:** [@ItsSmiffy](https://discuss.circleci.com/u/ItsSmiffy)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 3:50pm UTC](https://discuss.circleci.com/t/aws-s3-suddenly-failing-with-unable-to-locate-credentials/44416 "2022-06-13T15:50:24Z")
The build has been working correctly since it was setup (a long time ago) but as of the end of last week a step to upload build artefacts to an AWS S3 bucket is now failing with the output “Unable to locate credentials”. … --- ## [How to run sam local start-api](https://discuss.circleci.com/t/how-to-run-sam-local-start-api/38353)
**Author:** [@guppy0356](https://discuss.circleci.com/u/guppy0356)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:17pm UTC](https://discuss.circleci.com/t/how-to-run-sam-local-start-api/38353 "2022-05-16T14:17:05Z")
When I run sam local start-api in the jbo, I always get Build was canceled. My configuration is like this. Main purpose is invoke sam local start-api and get response with curl. I have no idea to fix it. version: 2 jo… --- ## [Is there a way to choose between GCP and AWS?](https://discuss.circleci.com/t/is-there-a-way-to-choose-between-gcp-and-aws/41563)
**Author:** [@oarriet](https://discuss.circleci.com/u/oarriet)\ **Replies:** 2\ **Last updated:** [April 13, 2022, 5:28pm UTC](https://discuss.circleci.com/t/is-there-a-way-to-choose-between-gcp-and-aws/41563 "2022-04-13T17:28:02Z")
We have several Projects created earlier 2020 and those are running just fine. But we have created a couple of projects in October 2021 using the exact same config.yml and docker files, but those are failing with IP prob… --- ## [Test Output from AWS ECS](https://discuss.circleci.com/t/test-output-from-aws-ecs/43606)
**Author:** [@WillGreen](https://discuss.circleci.com/u/WillGreen)\ **Replies:** 2\ **Last updated:** [April 10, 2022, 10:02am UTC](https://discuss.circleci.com/t/test-output-from-aws-ecs/43606 "2022-04-10T10:02:51Z")
Hello, I’m working on a Python application running in Docker. I’m looking for the best way to get test output back from AWS ECS Fargate. Pytests running using a CircleCI docker image (cimg/python:3.9) work well and pro… --- ## [Does CircleCI support using a customer AMI instead of Docker for running tests?](https://discuss.circleci.com/t/does-circleci-support-using-a-customer-ami-instead-of-docker-for-running-tests/43494)
**Author:** [@rnhurt](https://discuss.circleci.com/u/rnhurt)\ **Replies:** 3\ **Last updated:** [March 31, 2022, 3:01pm UTC](https://discuss.circleci.com/t/does-circleci-support-using-a-customer-ami-instead-of-docker-for-running-tests/43494 "2022-03-31T15:01:51Z")
We are using AWS Image Builder to create a custom AMI for our EC2 instances. I would like to use this same AMI to run our tests. I see that CircleCI has the ability to “use” a custom AMI, but it appears as if only as a… [Next page](https://discuss.circleci.com/tag/aws/90.md?match_all_tags=true&page=1&tags%5B%5D=aws)