Tagging fips endpoint resolves to a domain that doesn't exist

Aperta
  • Qualcosa non va?
#3,395 1 commento 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
3/5
Tempo stimato
1-2 giorni
Idoneità per principianti
50/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
aws, php
Ambito
cloud

Direzione di ricerca

Reproduce with the PHP snippet using Aws\Sdk with use_fips_endpoint set to true in us-gov-west-1, then trace how createResourceGroupsTaggingAPI() resolves its endpoint for the tagging service. Compare the tagging service's FIPS endpoint metadata with a service that resolves correctly in GovCloud, and check whether the endpoint should be corrected or rejected explicitly. Done means GetResources targets a resolvable FIPS host or fails with a clear unsupported-endpoint error, with a test covering the GovCloud FIPS case.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

bug p2 queued service-api
Describe the bug

In for govcloud regions with AWS_USE_FIPS_ENDPOINT=true the following urls are resolved:

This leads to errors like:

Error executing "GetResources" on "https://tagging-fips.us-gov-west-1.amazonaws.com/"; AWS HTTP error: cURL error 6: Could not resolve host: tagging-fips.us-gov-west-1.amazonaws.com (see https://curl.se/libcurl/c/libcurl-errors.html) for https://tagging-fips.us-gov-west-1.amazonaws.com/

Regression Issue
  • Select this option if this issue appears to be a regression.
Expected Behavior

I expect the domain that it uses to have a DNS entry that routes to the fips compliant service

Current Behavior

A domain that is actually routed should be returned.

Reproduction Steps
$sdk = new Aws\Sdk([
    'region' => 'us-gov-west-1',
    'use_fips_endpoint' => true, // or AWS_USE_FIPS_ENDPOINT=true
    ...
]);
$sdk->createResourceGroupsTaggingAPI()->getResources();
Possible Solution

Add a dns entry for the fips tagging API, or throw an exception if there is no fips tagging API.

Additional Information/Context

No response

SDK version used

3.402.2

Environment details (Version of PHP (php -v)? OS name and version, etc.)

PHP 8.5, environment independent

Lingua principale
PHP
Stelle
6.2k
Fork
1.3k
Merge medio
4g 15h
PR unite (30g)
21

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di aws/aws-sdk-php

Tutte le issue di aws/aws-sdk-php

Issue simili

Altre issue su PHP

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.