# Input 'aws-s3' failed with: failed to initialize s3 poller: failed to get AWS region for bucket\_arn:

**URL:** <https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 16, 2021, 5:47pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355 "2021-11-16T17:47:11Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sguillen18](https://avatars.discourse-cdn.com/v4/letter/s/3d9bf3/32.png) [@sguillen18](https://discuss.elastic.co/u/sguillen18)\
**Post date:** [November 16, 2021, 5:47pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355/1 "2021-11-16T17:47:11Z")

</div>

Hello,

I'm having trouble using the S3 module as described [here](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-aws-s3.html#aws-credentials-config)

I'm authenticating with access and secret key and my .yml begins like this:

filebeat.inputs:

```auto
- type: aws-s3
  bucket_arn: arn:aws:s3:::guillens
  number_of_workers: 5
  bucket_list_interval: 300s
  access_key_id: 'myAccessKey'
  secret_access_key: 'mySecretKey'
  endpoint: 's3.us-east-1.amazonaws.com'

```

When I run my filebeat I get the following error:

```auto
Input 'aws-s3' failed with: failed to initialize s3 poller: failed to get AWS region for bucket_arn: exceeded maximum number of attempts, 3, request send failed, Get "https://s3.us-east-1.s3-accesspoint.us-east-1.amazonaws.com/guillens?location=": x509: certificate is valid for s3.amazonaws.com, *.s3.amazonaws.com, *.s3.dualstack.us-east-1.amazonaws.com, s3.dualstack.us-east-1.amazonaws.com, *.s3.us-east-1.amazonaws.com, s3.us-east-1.amazonaws.com, *.s3-control.us-east-1.amazonaws.com, s3-control.us-east-1.amazonaws.com, *.s3-control.dualstack.us-east-1.amazonaws.com, s3-control.dualstack.us-east-1.amazonaws.com, *.s3-accesspoint.us-east-1.amazonaws.com, *.s3-accesspoint.dualstack.us-east-1.amazonaws.com, *.s3.us-east-1.vpce.amazonaws.com, not s3.us-east-1.s3-accesspoint.us-east-1.amazonaws.com	{"id": "D16ABDB47E2E81B3"}

```

It looks like the issue has to do with this ` x509: certificate is valid for s3.amazonaws.com` but I'm not sure how to resolve this? Couldn't find any info online regarding this.

Anyone know where I get this certificate?

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [November 16, 2021, 9:39pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355/2 "2021-11-16T21:39:19Z")

</div>

Remove the `endpoint` config. You don't need it unless your using a special AWS environment or 3rd party S3 services.

---

<div class="post-metadata">

**Author:** ![sguillen18](https://avatars.discourse-cdn.com/v4/letter/s/3d9bf3/32.png) [@sguillen18](https://discuss.elastic.co/u/sguillen18)\
**Post date:** [November 18, 2021, 7:38pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355/3 "2021-11-18T19:38:14Z")

</div>

when i do that i get the following:

```auto
"unknown endpoint, could not resolve endpoint, partition: \"aws\", service: \"s3\", region: \"\", known: [eu-north-1 us-east-2 s3-external-1 sa-east-1 af-south-1 ap-east-1 ap-south-1 eu-central-1 us-west-2 ap-northeast-2 ap-southeast-1 aws-global us-east-1 ca-central-1 eu-south-1 me-south-1 eu-west-1 us-west-1 eu-west-2 eu-west-3 ap-northeast-1 ap-southeast-2]"}

```

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [November 18, 2021, 9:41pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355/4 "2021-11-18T21:41:46Z")

</div>

What version of Filebeat are u using? And are u trying to use an S3 access point instead of the standard urls?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 16, 2021, 11:42pm UTC](https://discuss.elastic.co/t/input-aws-s3-failed-with-failed-to-initialize-s3-poller-failed-to-get-aws-region-for-bucket-arn/289355/5 "2021-12-16T23:42:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.