S3: getting no such host error when using fips enabled endpoints

[michalbabu]

Hello all.

I am attempting to use fips enabled aws endpoints, but I am getting an error:

caused by: Head "https://s3-fips.us-east-1.amazonaws.com/XXX": dial tcp: lookup s3-fips.us-east-1.amazonaws.com: no such host

I can re-create the problem when I export AWS_USE_FIPS_ENDPOINT=true and run the following code:

package main                                                                               

import (
    "flag"
    "fmt"

    "github.com/aws/aws-sdk-go/aws"
    "github.com/aws/aws-sdk-go/aws/session"
    "github.com/aws/aws-sdk-go/service/s3"
)

func main() {
    bucket := flag.String("b", "", "The name of the bucket")
    flag.Parse()

    if *bucket == "" {
        fmt.Println("You must supply the name of a bucket (-b BUCKET)")
        return
    }

    sess := session.Must(session.NewSessionWithOptions(session.Options{
        SharedConfigState: session.SharedConfigEnable,
    }))

    conn := s3.New(sess)

    input := &s3.HeadBucketInput{
        Bucket: aws.String(*bucket),
    }

    _, err := conn.HeadBucket(input)

    fmt.Println(err)
}

Do you know if I am doing anything wrong or did I found a bug?

[RanVaknin]

This should be solved now. I believe the issue was with how the S3 team defined the fips endpoint resolver.
related: aws/aws-sdk#268

Can you please check if this is resolving correctly?

Thanks,
Ran

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.