Localstack抛出请求中包含的安全令牌无效

Question

我使用Localstack和Test容器（（test容器： localstack： 1.15.2））进行集成测试，并在测试设置中设置秘密，如下所示：代码示例

 import com.amazonaws.services.secretsmanager.AWSSecretsManager;
import com.amazonaws.services.secretsmanager.AWSSecretsManagerClientBuilder;
import com.amazonaws.services.secretsmanager.model.CreateSecretRequest; 
import org.junit.Rule;
import org.junit.Test;
import org.testcontainers.containers.localstack.LocalStackContainer;
import org.testcontainers.utility.DockerImageName; 
import static org.testcontainers.containers.localstack.LocalStackContainer.Service.SECRETSMANAGER;

public class QueueServiceTest {

    DockerImageName localstackImage = DockerImageName.parse("localstack/localstack:0.11.3");
    @Rule
    public LocalStackContainer localstack = new LocalStackContainer(localstackImage)
            .withServices(SECRETSMANAGER).withEnv("LOCALSTACK_HOSTNAME", "localhost").withEnv("HOSTNAME", "localhost");
    @Test
    public void someTestMethod() {
        AWSSecretsManager secretsManager = AWSSecretsManagerClientBuilder.standard()
                .withCredentials(localstack.getDefaultCredentialsProvider()).withRegion(localstack.getRegion())
                .build();

        String secretString = "usrnme";
        CreateSecretRequest request = new CreateSecretRequest().withName("test")
                .withSecretString(secretString)
     .withRequestCredentialsProvider(localstack.getDefaultCredentialsProvider());
        secretsManager.createSecret(request);
    }

}

现在，测试因错误而崩溃：

com.amazonaws.services.secretsmanager.model.AWSSecretsManagerException：请求中包含的安全令牌无效。（服务：AWSSecuresManager；状态代码：400；错误码：未识别客户端异常；请求ID：314b0dee-69ed-4b08-9cd0-2618b8e14b25；代理：null）

AmazonHttpClient.java:744$com.amazonaws.http.AmazonHttpClient（RequestExecutor.access）AmazonHttpClient.java:704$com.amazonaws.http.AmazonHttpClient（RequestExecutionBuilderImpl.execute）AmazonHttpClient.java:686$com.amazonaws.http.AmazonHttpClient.execute（AmazonHttpClient.java:550）com.amazonaws.http.AmazonHttpClient.execute$AmazonHttpClient.java:530（com.amazonaws.services.secretsmanager.AWSSecretsManagerClient.doInvoke）AWSSecretsManagerClient.java:2625$RequestExecutor.doExecute（AmazonHttpClient.java:802）com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer（AmazonHttpClient.java:770）com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute（com.amazonaws.http.AmazonHttpClient）RequestExecutor.handleErrorResponse$AmazonHttpClient.java:1819500美元（com.amazonaws.http.AmazonHttpClient）RequestExecutor.handleServiceErrorResponse$AmazonHttpClient.java:1403（com.amazonaws.http.AmazonHttpClient）RequestExecutor.executeOneRequest（AmazonHttpClient.java:1372）com.amazonaws.http.AmazonHttpClient（RequestExecutor.executeHelper）AmazonHttpClient.java:1145（com.amazonaws.http.AmazonHttpClient）

我想我遗漏了一些参数，有人能帮我弄清楚吗？

Answer 1

缺少 AWSSecretsManagerClientBuilder 的终端节点配置。现在，您的客户以真实的 AWS 终端节点为目标，例如：https://secretsmanager.us-east-1.amazonaws.com:443

public class LocalStackSecretsManagerTest {

  DockerImageName localstackImage = DockerImageName.parse("localstack/localstack:0.11.3");

  @Rule
  public LocalStackContainer localstack = new LocalStackContainer(localstackImage)
    .withServices(SECRETSMANAGER)
    .withEnv("LOCALSTACK_HOSTNAME", "localhost")
    .withEnv("HOSTNAME", "localhost");

  @Test
   void someTestMethod() {
    AWSSecretsManager secretsManager = AWSSecretsManagerClientBuilder.standard()
      .withCredentials(localstack.getDefaultCredentialsProvider())
      .withEndpointConfiguration(localstack.getEndpointConfiguration(SECRETSMANAGER)) // this is the important line
      .build();

    String secretString = "usrnme";

    CreateSecretRequest request = new CreateSecretRequest()
      .withName("test")
      .withSecretString(secretString);

    secretsManager.createSecret(request);
  }
}

指定endpoint时，可以删除区域配置。

附加的<代码>。withRequestCredentialsProvider(local stack . getdefaultcredentialsprovider())；< code>CreateSecretRequest 上的是多余的，仅当您希望根据< code>CreateSecretRequest 重写凭据提供程序时才需要。