Can't setup SQS credentials via credentials file

[Nakilon]

I made a file:

[default]
aws_access_key_id = ...
aws_secret_access_key = ...
region = ru-central1
endpoint = https://message-queue.api.cloud.yandex.net

but I get the error when using the "shoryuken" gem:

No region was provided. Configure the `:region` option or export the region name to ENV['AWS_REGION'] (Aws::Errors::MissingRegionError)

To debug it I did:

Aws.config.update credentials: Aws::SharedCredentials.new(path: "aws.secret")
puts Aws.config[:credentials].to_yaml

and it prints

--- !ruby/object:Aws::SharedCredentials
path: aws.secret
profile_name: default
credentials: !ruby/object:Aws::Credentials
  access_key_id: ...
  secret_access_key: ...
  session_token: 

i.e. it only read the access key.

UPD: Aws.config.update({region: "ru-central1", endpoint: "https://message-queue.api.cloud.yandex.net"}) does not help.

[alextwoods]

I'm not all that familiar with shoryuken - how is it creating the SQS client?

To create an sqs client using that profile: sqs = Aws::Sqs::Client.new(profile: 'default') - that should load the credentials and region. However, you likely need to set the endpoint when creating the client.

The Aws::SharedCredentials is expected to only have access_key_id and secret_access_key as its only a way of loading static credentials from a file.

[Nakilon]

Ok, maybe I don't need that gem. Then following the https://docs.aws.amazon.com/sdk-for-ruby/v3/developer-guide/sqs-example-send-messages.html and https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SQS/Client.html I came up with this:

require "aws-sdk-sqs"
require "aws-sdk-sts"

region = "ru-central1"

queue_name = "..."
p queue_url = "https://message-queue.api.cloud.yandex.net/#{
  p Aws::STS::Client.new(region: region).get_caller_identity.account
}/#{queue_name}"

Aws::SQS::Client.new(
  credentials: Aws::SharedCredentials.new(path: "aws.secret"),
  region: region
).send_message(
  queue_url: queue_url,
  message_body: "msg"
)

and got

gems/aws-sdk-core-3.131.2/lib/aws-sdk-core/plugins/signature_v4.rb:64:in `sign_request': unable to sign request without credentials set (Aws::Errors::MissingCredentialsError)

I suppose it's because the sts gem needs to have endpoint provided too? How? And I'm not sure I know what value it should be. There are no Ruby docs there and libraries in different languages are the black boxes to me https://cloud.yandex.com/en-ru/docs/message-queue/instruments/python

[Nakilon]

Found some solution. Copied the queue_url from the cloud console.

require "aws-sdk-sqs"

Aws::SQS::Client.new(
  credentials: Aws::SharedCredentials.new(path: "aws.secret"),
  region: "ru-central1"
).send_message(
  queue_url: "https://message-queue.api.cloud.yandex.net/.../.../....fifo",
  message_body: "msg#{rand}",
  message_group_id: "0"
)

[alextwoods]

As an aside - you can also use sqs list_queues (see: https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SQS/Client.html#list_queues-instance_method) from the client.