MissingSecurityToken Authentication Failure when using ScoutSuite with Alibaba Cloud

I am trying to scan an Alibaba Cloud account with ScoutSuite using the following CLI parameters:

scout aliyun --access-keys -k SECRETABC123 -s SECRETABCXYZ

This results in an Authentication Failure which claims that a mandatory SecurityToken is missing. However, besides of the Access Key ID and the Access Key Secret, there is no option to provide any additional Security Token.

The debug-output looks as follow:

2024-11-06 15:03:10 Asgaros scout[28692] INFO Launching Scout
2024-11-06 15:03:10 Asgaros scout[28692] INFO Authenticating to cloud provider
2024-11-06 15:03:11 Asgaros scout[28692] ERROR __main__.py L217: Authentication failure: HTTP Status: 400 Error:MissingSecurityToken SecurityToken is mandatory for this action. RequestID: 193F64B6-9BCA-54FF-875E-7A99655518DE
Traceback (most recent call last):
  File "C:\Apps\ScoutSuite\venv\Lib\site-packages\ScoutSuite\providers\aliyun\authentication_strategy.py", line 34, in authenticate
    response = client.do_action_with_exception(
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Apps\ScoutSuite\venv\Lib\site-packages\aliyunsdkcore\client.py", line 503, in do_action_with_exception
    raise exception
aliyunsdkcore.acs_exception.exceptions.ServerException: HTTP Status: 400 Error:MissingSecurityToken SecurityToken is mandatory for this action. RequestID: 193F64B6-9BCA-54FF-875E-7A99655518DE
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "C:\Apps\ScoutSuite\venv\Lib\site-packages\ScoutSuite\__main__.py", line 217, in _run
    credentials = auth_strategy.authenticate(profile=profile,
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Apps\ScoutSuite\venv\Lib\site-packages\ScoutSuite\providers\aliyun\authentication_strategy.py", line 41, in authenticate
    raise AuthenticationException(e)
ScoutSuite.providers.base.authentication_strategy.AuthenticationException: HTTP Status: 400 Error:MissingSecurityToken SecurityToken is mandatory for this action. RequestID: 193F64B6-9BCA-54FF-875E-7A99655518DE

MissingSecurityToken Authentication Failure when using ScoutSuite with Alibaba Cloud #1678

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

MissingSecurityToken Authentication Failure when using ScoutSuite with Alibaba Cloud #1678

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions