EDR: Event Forwarder Does not Connect to External S3 Bucket
search cancel

EDR: Event Forwarder Does not Connect to External S3 Bucket

book

Article ID: 287442

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Error message is encountered in /var/log/cb/integrations/cb-event-forwarder/cb-event-forwarder.log
time="2020-09-15T11:35:02-04:00" level=info msg="Could not open bucket edrforward: NoCredentialProviders: no valid providers in chain. Deprecated.\n\tFor verbose messaging see aws.Config.CredentialsChainVerboseErrors"

 

Environment

  • EDR: 7.1.x +
  • EDR Event Forwarder: 3.1.x +

Cause

  • Credential Profile name is not setup within the UI.
  • AWS Credential ini file will also need to be updated with the appropriate profile name and format.

Resolution

  • Add a credential profile name in the EDR Event Forwarder UI:
    • User-added image
  • Update AWS Credential ini file to reflect the credential profile name:
    • User-added image
  • The AWS Credential ini file will need to be uploaded using the button below:
    • User-added image