Error in Configuring AWS S3 Data Store in Mongodb Data Lake

MongoDB Atlas
1

Getting this error “atlas cannot assume the specified role” while trying to add aws data store for data lake in atlas. Can someone help me on what is the cause of this error why it can’t assume a role?

IMG-20221217-WA0001
IMG-20221217-WA00011280×1066 360 KB

policy json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": <ARN>
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": <ID>
        }
      }
    }
  ]
}```
2

Hello @P_Vivek

It’s a bit hard to say from this error exactly what is causing the issue. But for Atlas Data Federation, this setup flow is giving MongoDB’s Data Federation’s IAM User the permission to “assume” your IAM Role, which grants access to your bucket. For some reason Data Federation is getting an error back from AWS at this step while it is attempting to assume the role.

Did you successfully complete the earlier steps to create a new role by running the AWS CLI commands? Did anything change with the role in between creating them with the suggested commands and trying to run this?

If you’d like to walk through this live, throw some time on my calendar here: Calendly - Benjamin Flast

Best,
Ben