# S3 sink - Credentials provider (Ec2InstanceMetadata)

**URL:** <https://forum.confluent.io/t/s3-sink-credentials-provider-ec2instancemetadata/4766>\
**Category:** Kafka Connect\
**Created:** [13 April 2022 20:48 UTC](https://forum.confluent.io/t/s3-sink-credentials-provider-ec2instancemetadata/4766 "2022-04-13T20:48:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![flysen](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/flysen/32/1810_2.png) [@flysen](https://forum.confluent.io/u/flysen)\
**Post date:** [13 April 2022 20:48 UTC](https://forum.confluent.io/t/s3-sink-credentials-provider-ec2instancemetadata/4766/1 "2022-04-13T20:48:55Z")

</div>

Hi,  
My problem is to use credentials provider 😬  
**com.amazonaws.auth.profile.ProfileCredentialsProvider** for my S3 connector.

This is a working configuration `~/.aws/credentials`:

```auto
[default]
aws_access_key_id = *****
aws_secret_access_key = *****

```

My new fancy configuration `~/.aws/credentials`

```auto
[default]
region = eu-west-1
credential_source = Ec2InstanceMetadata
role_arn = arn:aws:iam::123456:role/self-service/s3/ls3.kafka-connect-role
role_session_name = testing_kc_role

```

Usin the CLI `aws sts get-caller-identity` gives me the correct assumed role 👌

The log output from kafka-connect:

```auto
2022-04-13 17:51:03,561 DEBUG com.amazonaws.auth.AWSCredentialsProviderChain:129 - Unable to load credentials from com.amazonaws.auth.profile.ProfileCredentialsProvider@4478aad0: Unable to load credentials from profile [default]: Source profile name is not specified

```

I follow this documentation: [Amazon S3 Sink Connector for Confluent Platform | Confluent Platform 5.5.7](https://docs.confluent.io/5.5.7/connect/kafka-connect-s3/index.html#credentials-providers)

Thank  
Fredrik

---

<div class="post-metadata">

**Author:** ![flysen](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/flysen/32/1810_2.png) [@flysen](https://forum.confluent.io/u/flysen)\
**Post date:** [14 April 2022 07:29 UTC](https://forum.confluent.io/t/s3-sink-credentials-provider-ec2instancemetadata/4766/2 "2022-04-14T07:29:27Z")

</div>

Issue opened: [S3 sink - Credentials provider (Ec2InstanceMetadata) · Issue #507 · confluentinc/kafka-connect-storage-cloud · GitHub](https://github.com/confluentinc/kafka-connect-storage-cloud/issues/507)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/1X/c49438c90c9df282e9996fdf6971be890c71b65a.svg) [@system](https://forum.confluent.io/u/system)\
**Post date:** [14 May 2022 07:29 UTC](https://forum.confluent.io/t/s3-sink-credentials-provider-ec2instancemetadata/4766/3 "2022-05-14T07:29:28Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.