How is it possible to use the current EC2 instances IAM role in AWS ADK PHP?

Question

I would like to use SNS/SQS in my PHP application, that is running on an EC2 instance.

I was able to find the guide about credentials for the AWS SDK for PHP Version 3, but I still have no idea how to simply use the IAM Role that is associated with my EC2 instance, my app is running on.

This is what I tried:

$SnSclient = new SnsClient([
    'profile' => 'default',
    'region' => 'eu-central-1',
    'version' => '2010-03-31',
    'credentials' => \Aws\Credentials\CredentialProvider::defaultProvider()
]);

But I get this error:

PHP Fatal error:  Uncaught Aws\Exception\CredentialsException: Cannot read credentials from /home/ec2-user/.aws/credentials in phar:///var/www/html/aws.phar/Aws/Credentials/CredentialProvider.php:874

I would like to avoid uploading my pem file to the instance, since it is already running in AWS, as far as I know it should be able to use it's IAM role

@ErmiyaEskandary No, it gives the same error – Iter Ator Aug 06 '22 at 15:22 — Iter Ator, Aug 06 '22 at 15:22

score 0 · Accepted Answer · answered Aug 06 '22 at 15:27

0

The 'profile' => 'default', line had to be removed, as suggested in this answer

It does not seem to be well documented, but if you are using the IAM Role of the instance, then no profile or credentials attributes are necessary

answered Aug 06 '22 at 15:27

Iter Ator

8,226
20
73
164

It is well documented for every SDK, including PHP https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/guide_credentials.html#default-credential-chain – jordanm Aug 06 '22 at 16:10
Please accept your answer to mark the question as answered. – hakre Jul 23 '23 at 19:00
@jordanm Unfortunately, it is not – Iter Ator Jul 24 '23 at 19:19

How is it possible to use the current EC2 instances IAM role in AWS ADK PHP?

1 Answers1