InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records. How to fix this?

Question

I'm running a web app that uploads and retrieves files from s3 using an express backend, and it's currently live hosted on Heroku, where the access key id and secret key are set using config vars, absolutely no problems there it works perfectly fine.
When I try to run the app locally I'm getting the error showing "InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records."/
I have tried setting the access key explicitly within the config object in my server.js file, I've tried setting my environment variables through windows, and have made sure that my .aws/credentials file also contains the correct keys, copied directly from IAM.
I've also made a new access key that I've explicitly stated is for use on a local device, updated all of the above, and am getting the same error. Clearly the problem must be on my device somewhere but I've run out of places to check/change it - it even gives this error while my server is logging the correct config details when I boot it up.
When I boot up the server I have it logging my s3client object, which outputs the same Access Key ID and the same Secret Access Key as my live site is currently using in its config vars, but I'm still being told the Access Key ID doesn't exist

Accepted Answer

I'd suggest you to check the `USERPROFILE` if you are configuring the Credentials in Windows.

Try to enter the user profile and remove the `.aws/credentials, .aws/config` file and then you can try `aws configure` again.

Let me share a sample powershell script.

```
$awsCredentialsFile = "$env:USERPROFILE\.aws\credentials"
$awsConfigFile = "$env:USERPROFILE\.aws\config"
aws configure set aws_access_key_id $AccessKeyId
aws configure set aws_secret_access_key $SecretAccessKey
aws configure set region us-east-1
```
Reply here how it goes.

Bhuvan

Answer

I'd start troubleshooting this by running following command, this is basically "whoami" of AWS:

aws sts get-caller-identity

Based on the output of this, you'll get to know which user it is using.

Though you have already mentioned this, but I'd print AWS access key and secret access key from the variable, which you are using. Make sure those values are not getting logged to some persistent logs.

Comment here how it goes, happy to be part of your troubleshooting.

Abhishek

InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records. How to fix this?

Relevant content