Tagging fips endpoint resolves to a domain that doesn't exist
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
调研方向
Reproduce with the PHP snippet using Aws\Sdk with use_fips_endpoint set to true in us-gov-west-1, then trace how createResourceGroupsTaggingAPI() resolves its endpoint for the tagging service. Compare the tagging service's FIPS endpoint metadata with a service that resolves correctly in GovCloud, and check whether the endpoint should be corrected or rejected explicitly. Done means GetResources targets a resolvable FIPS host or fails with a clear unsupported-endpoint error, with a test covering the GovCloud FIPS case.
由索引模型根据 Issue 内容生成。
描述
Describe the bug
In for govcloud regions with AWS_USE_FIPS_ENDPOINT=true the following urls are resolved:
This leads to errors like:
Error executing "GetResources" on "https://tagging-fips.us-gov-west-1.amazonaws.com/"; AWS HTTP error: cURL error 6: Could not resolve host: tagging-fips.us-gov-west-1.amazonaws.com (see https://curl.se/libcurl/c/libcurl-errors.html) for https://tagging-fips.us-gov-west-1.amazonaws.com/
Regression Issue
- Select this option if this issue appears to be a regression.
Expected Behavior
I expect the domain that it uses to have a DNS entry that routes to the fips compliant service
Current Behavior
A domain that is actually routed should be returned.
Reproduction Steps
$sdk = new Aws\Sdk([
'region' => 'us-gov-west-1',
'use_fips_endpoint' => true, // or AWS_USE_FIPS_ENDPOINT=true
...
]);
$sdk->createResourceGroupsTaggingAPI()->getResources();
Possible Solution
Add a dns entry for the fips tagging API, or throw an exception if there is no fips tagging API.
Additional Information/Context
No response
SDK version used
3.402.2
Environment details (Version of PHP (php -v)? OS name and version, etc.)
PHP 8.5, environment independent
- 主要语言
- PHP
- 星标
- 6.2k
- 派生
- 1.3k
- 平均合并
- 4 天 15 小时
- 30 天内合并 PR
- 21
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
aws/aws-sdk-php 的其他 Issue
-
RDS auth tokens and presigned URLs get an expiry one hour too long during the autumn DST change可能已有人在做 @stobrien89 于 7 天前认领。 未关闭bug
难度 4/5 3-5 天 新手友好度 55/100
aws/aws-sdk-php#3392 · 2 条评论 · 已指派 1 人 ·
维护者通常 1 天内回复
-
The SDK now requires PHP 8.2 or later可能已有人在做 @stobrien89 于 18 天前认领。 未关闭announcement SECURITY
aws/aws-sdk-php#3385 · 已指派 1 人 ·
维护者通常 1 天内回复
-
Shared config file is read and parsed repeatedly when creating a client可能已有人在做 @LukaszFilipowski 于 7 天前认领。 未关闭feature-request p3
难度 3/5 半天 新手友好度 45/100
aws/aws-sdk-php#3377 · 1 条评论 ·
维护者通常 1 天内回复
-
announcement
难度 4/5 3-5 天 新手友好度 12/100
aws/aws-sdk-php#3369 ·
维护者通常 1 天内回复
-
SecretsManagerClient: Detect `PARAMETERS_SECRETS_EXTENSION_HTTP_PORT` and use extension directly可能重新可做 @stobrien89 于 109 天前认领，目前没有进行中的 PR。 未关闭feature-request
aws/aws-sdk-php#3325 · 2 条评论 · 已指派 1 人 ·
维护者通常 1 天内回复
相似的 Issue
-
docs good first issue php
难度 1/5 1-3 小时 新手友好度 90/100
维护者通常 1 天内回复
-
Area: UI Priority: High Status: Available Type: Maintenance
难度 2/5 1-3 小时 新手友好度 62/100
维护者通常 1 天内回复
-
fix(flexi-content): wrap editor aria-labels with i18n可能已有人在做 @Ankitavasudev 今天认领。 未关闭first-timers-only focus: accessibility focus: blocks focus: i18n good first issue hacktoberfest help wanted type: bug up-for-grabs winter-of-code
难度 1/5 1-3 小时 新手友好度 90/100
noruzzamans/gslider-blocks#697 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
-
I forgot the add database cross reference button可能已有人在做 @dsenalik 今天认领。 未关闭Good First Issue Group 2 - Data Storage | Tripal DBX | Chado Group 7 - Page Display
难度 2/5 1-3 小时 新手友好度 72/100