Skip to content
This repository has been archived by the owner on Nov 8, 2021. It is now read-only.

Imported users are deleted if API fails (e.g. rate limiting) #154

Open
giantsystems opened this issue Mar 3, 2020 · 4 comments
Open

Imported users are deleted if API fails (e.g. rate limiting) #154

giantsystems opened this issue Mar 3, 2020 · 4 comments
Labels

Comments

@giantsystems
Copy link

We're seeing some of our instances remove all the IAM local users on one 10 minute check and then recreate them on the next 10 minute check. Obviously with new UIDs so any granted permissions are lost.

We suspect we've now deployed this on so many instances, that all check on the 10 minute mark, that we're likely hitting the documented API limits and when a call for users fails, they all get removed, rather than just ignored.

We're going to adjust our cron jobs to try and offset some updates but are there any options for increasing API limits on an account?

@michaelwittig
Copy link
Contributor

#96 seems to fix this issue

are you using the latest version of the scripts?

@giantsystems
Copy link
Author

Jan 2019 was the last time I updated from the repo. Looks like #96 pre-dates that so should be included. Is there a version number anywhere I can check to confirm?

@lbrandel
Copy link

lbrandel commented Mar 3, 2020

I'm seeing the same issue as well. The script outputs the following and then deletes the users:
An error occurred (Throttling) when calling the GetGroup operation (reached max retries: 4): Rate exceeded

@lbrandel
Copy link

lbrandel commented Mar 3, 2020

And I did cksum against my version of the import_users.sh and the file I just pulled off the repo and they are the same. So, the currently available version of this file has the bug in it.

@michaelwittig michaelwittig added bug and removed question labels Mar 4, 2020
@michaelwittig michaelwittig changed the title Suspected API rate limiting issue - any workarounds? Imported users are deleted if API fails (e.g. rate limiting) Mar 4, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

3 participants