opened 01:05AM - 27 Oct 15 UTC
closed 12:14PM - 27 Dec 21 UTC
bug
This was initially reported in a Discuss thread [here](https://discuss.elastic.c…o/t/iam-credentials-not-recognised-used-for-s3-plugins-used-input-s3-codec-cloudtrail/32464).
Config;
```
input {
s3 {
bucket => "mybucketname-logs-cloudtrail"
access_key_id => "ACCESS_KEY_HERE"
secret_access_key => "SECRET_KEY_HERE"
region => "eu-west-1"
codec => "cloudtrail"
type => "cloudtrail"
prefix => "AWSLogs/AWS_ACCOUNT_ID_HERE/CloudTrail/eu-west-1/2015/09/27"
temporary_directory => "/tmp/temp-cloudtrail_s3_temp"
sincedb_path => "/tmp/temp-cloudtrail_s3_sincedb"
debug => "true"
}
}
output {
elasticsearch {
host => "ELASTICSEARCH_URL_HERE"
protocol => "http"
}
stdout {
codec => "rubydebug"
}
}
```
There's some debug logging [here](http://pastebin.com/cw6BpnhR) as well.
I hope the discuss thread and this gives you a good idea of the situation, but let me know if my summary sucks :)