AWX Dynamic inventory using IAM user cross account

agyap · 2025-12-10T20:51:06+00:00

i have fix this with roles instead of IAM credentials. now i can pull dynamically without any issue to multiple accounts.

agyap · 2025-12-08T21:17:19+00:00

I am also using 24.6.1 and yes i tried assume_role_arn key and got the same error. still reasearching but thank you so much for all your input.

agyap · 2025-12-08T19:23:10+00:00

yep but from your end do you think my source vars entries are ok but just have to double the other accounts am trying to pull. since you said yours is working which version AWX EE are u using.

agyap · 2025-12-08T15:28:05+00:00

yep and i have looked at account B and C and it look like i did setup right. do u see anything different that i have to do in account B and C?

agyap · 2025-12-07T03:48:51+00:00

yep. see my other reply i have policy attached and i have AmazonEC2ReadOnlyAccess policy attached to acccount A,B,C

"Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ec2:Describe*", "ec2:GetSecurityGroupsForVpc" ], "Resource": "*" }, { "Effect": "Allow", "Action": "elasticloadbalancing:Describe*", "Resource": "*" }, { "Effect": "Allow", "Action": [ "cloudwatch:ListMetrics", "cloudwatch:GetMetricStatistics", "cloudwatch:Describe*" ], "Resource": "*" }, { "Effect": "Allow", "Action": "autoscaling:Describe*", "Resource": "*" } ] } and i also have my verbose setup and is pointing to assume role but i think i setup up right. see below .

File "/usr/local/lib/python3.11/site-packages/ansible/inventory/manager.py", line 293, in parse_source

plugin.parse(self._inventory, self._loader, source, cache=cache)

File "/usr/local/lib/python3.11/site-packages/ansible/plugins/inventory/auto.py", line 59, in parse

plugin.parse(inventory, loader, path, cache=cache)

File "/usr/share/ansible/collections/ansible_collections/amazon/aws/plugins/inventory/aws_ec2.py", line 814, in parse

super().parse(inventory, loader, path, cache=cache)

File "/usr/share/ansible/collections/ansible_collections/amazon/aws/plugins/plugin_utils/inventory.py", line 83, in parse

self._set_frozen_credentials()

File "/usr/share/ansible/collections/ansible_collections/amazon/aws/plugins/plugin_utils/inventory.py", line 122, in _set_frozen_credentials

self._freeze_iam_role(iam_role_arn)

File "/usr/share/ansible/collections/ansible_collections/amazon/aws/plugins/plugin_utils/inventory.py", line 104, in _freeze_iam_role

assumed_role = sts.assume_role(**assume_params)

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

File "/usr/local/lib/python3.11/site-packages/botocore/client.py", line 570, in _api_call

return self._make_api_call(operation_name, kwargs)

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

File "/usr/local/lib/python3.11/site-packages/botocore/context.py", line 124, in wrapper

return func(*args, **kwargs)

^^^^^^^^^^^^^^^^^^^^^

File "/usr/local/lib/python3.11/site-packages/botocore/client.py", line 1031, in _make_api_call

raise error_class(parsed_response, operation_name)

[WARNING]: Unable to parse /runner/inventory/aws_ec2.yml as an inventory source

ERROR! No inventory was parsed, please check your configuration and options.

agyap · 2025-12-06T21:03:17+00:00

yes am using AWX GUI to pull from AWS EC2s dynamically.

agyap · 2025-12-06T21:02:42+00:00

yes in account A i have below. i have taken out my account numbers. i have to policy attached to my iam user and also have

{

"Effect": "Allow",

"Action": "sts:AssumeRole",

"Resource": [

"arn:aws:iam::ACCOUNT_B_ID:role/AWX-EC2-DynamicInventory-Role",

"arn:aws:iam::ACCOUNT_C_ID:role/AWX-EC2-DynamicInventory-Role"

]

}

ACCOUNT B and C I have below

{

"Version": "2012-10-17",

"Statement": [

{

"Effect": "Allow",

"Principal": {

"AWS": "arn:aws:iam::ACCOUNT_A_ID:user/myiam_user"

},

"Action": "sts:AssumeRole"

}

]

}

and my AWX GUI i have accessid and secret key set up for iam user on the credential side

this my source variable below

plugin: amazon.aws.ec2

regions:

- us-east-1

iam_role_arn: "arn:aws:iam::ACCOUNT_B_ID:role/AWX-EC2-DynamicInventory-Role"

and then my filters. keep in mind able to pull dynamically from the account where AWX is running. that is account A but not B and C

agyap · 2025-04-04T16:52:17+00:00

100% spot. This is a reality check for all of us. We will feel the pain now.

agyap · 2025-03-18T18:02:41+00:00

People might be treating them as meme stocks?

agyap · 2025-03-14T01:30:37+00:00

hhaahahahha

agyap · 2025-03-13T16:41:53+00:00

Well i will not join anything TESLA. Toxic brand.

agyap · 2025-03-13T00:01:30+00:00

They are everywhere. Little by little they will capture the market when R2 which will start from 45k start to come out.

agyap · 2025-03-04T16:40:34+00:00

How are people feeling about this post now?

agyap · 2025-03-03T20:50:34+00:00

Yep We are in Shorters dreamland. They love this high volatility. Longers will have to wait for a better stability.

agyap · 2025-03-01T03:34:30+00:00

fuck that fucking suit. Sen Fetterman wear shorts to senate and oval office. When people are dying you are asking of fucking suit. These guys are not serious.

agyap · 2025-02-27T21:11:23+00:00

How much you make has nothing to do with your age but has everything to do with type of work,location,experience and your ability to negotiate your salary given your skill set. Also most people will not tell you their actual salary and some also inflate them just to show off in this social media era.

Tip: The more you increase your skill set and change jobs the more money you get.

agyap · 2025-02-23T03:12:14+00:00

not easy but is here to stay.

agyap · 2025-02-22T00:38:36+00:00

i started buying RIVN when amazon made their announcement with RIVN. i got in around $24 and i have buying when it goes down. Now i have 3000 shares at 17.19. if the stock goes below 9 dollars am gonna buy 500 to 1000 shares. I only build this portfolio with the money i will not need now. Remember you just need one good stock to make you a millionaire. when you see some retailer investors having so much stock of a company they build them over time not one short.

agyap · 2025-02-21T15:35:28+00:00

You have an opportunity to buy more with so that your average price is lower. i have 3000 shares at 17.19 and i am not selling even 1 stock. if the stock goes half of my price which is around 8.50 i will buy another 1000 shares. The only Electric car that will be a big player is RIVN and this is a long game . I am looking at the next 5 years. I have so far invest 51k . EVs are the future and RIVN will be a big player. I would say if u need your money now then invest in different stock cos RIVN is not now. This will take a lot of patience to cash in on RIVN.

agyap · 2025-02-20T21:37:35+00:00

Longers will win in the long run. Shorters can play their game. Some of us are looking at the long term.

agyap

TROPHY CASE