Skip to content

Secrets Manager client errors with latest BehaviorVersion #1273

@FocusJP

Description

@FocusJP

Describe the bug

I am receiving an error from the Secrets Manager client when using the latest BehaviorVersion::v2025_01_17(), but it works using the previous v2024_03_28. Other clients including STS, DynamoDB, and QuickSight all seem to work fine on the latest v2025_01_17.

Regression Issue

  • Select this option if this issue appears to be a regression.

Expected Behavior

The request completes without error.

Current Behavior

The following sdk error occurs when sending a Secrets Manager request.

DispatchFailure(DispatchFailure { source: ConnectorError { kind: Other(None), source: hyper_util::client::legacy::Error(Connect, Custom { kind: Other, error: Os { code: 10054, kind: ConnectionReset, message: "An existing connection was forcibly closed by the remote host." } }), connection: Unknown } })

Reproduction Steps

For a simple reproduction, here is my main.rs. The final call to Secrets Manager will raise the above error, but all the others succeed, and reverting to the previous BehaviorVersion fixes the error.

#[tokio::main]
async fn main() {
    let shared_config = aws_config::defaults(aws_config::BehaviorVersion::v2025_01_17())
        .profile_name("dev")
        .region("us-east-1")
        .load()
        .await;

    let sts_client = aws_sdk_sts::Client::new(&shared_config);

    let caller_identity = sts_client.get_caller_identity().send().await.unwrap();

    dbg!(&caller_identity);

    let dynamo_client = aws_sdk_dynamodb::Client::new(&shared_config);

    let tables = dynamo_client.list_tables().limit(2).send().await.unwrap();

    dbg!(&tables);

    let quicksight_client = aws_sdk_quicksight::Client::new(&shared_config);

    let users = quicksight_client
        .list_users()
        .namespace("default")
        .aws_account_id(caller_identity.account().unwrap())
        .max_results(2)
        .send()
        .await
        .unwrap();

    dbg!(&users);

    let sm_client = aws_sdk_secretsmanager::Client::new(&shared_config);

    let secrets = sm_client
        .list_secrets()
        .max_results(2)
        .send()
        .await
        .unwrap();

    dbg!(&secrets);
}

Along with my Cargo.toml:

[package]
name = "aws_rust_test"
version = "0.1.0"
edition = "2024"

[dependencies]
aws-config = "1.6.1"
aws-sdk-dynamodb = "1.71.0"
aws-sdk-quicksight = "1.81.0"
aws-sdk-secretsmanager = "1.68.0"
aws-sdk-sts = "1.65.0"
tokio = { version = "1.44.2", features = ["full"] }

Possible Solution

No response

Additional Information/Context

No response

Version

├── aws-config v1.6.1
│   ├── aws-credential-types v1.2.2
│   │   ├── aws-smithy-async v1.2.5
│   │   ├── aws-smithy-runtime-api v1.7.4
│   │   │   ├── aws-smithy-async v1.2.5 (*)
│   │   │   ├── aws-smithy-types v1.3.0
│   │   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-runtime v1.5.6
│   │   ├── aws-credential-types v1.2.2 (*)
│   │   ├── aws-sigv4 v1.3.0
│   │   │   ├── aws-credential-types v1.2.2 (*)
│   │   │   ├── aws-smithy-http v0.62.0
│   │   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   │   ├── aws-smithy-types v1.3.0 (*)
│   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-smithy-async v1.2.5 (*)
│   │   ├── aws-smithy-http v0.62.0 (*)
│   │   ├── aws-smithy-runtime v1.8.1
│   │   │   ├── aws-smithy-async v1.2.5 (*)
│   │   │   ├── aws-smithy-http v0.62.0 (*)
│   │   │   ├── aws-smithy-http-client v1.0.1
│   │   │   │   ├── aws-smithy-async v1.2.5 (*)
│   │   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   │   ├── aws-smithy-types v1.3.0 (*)
│   │   │   │   │   │   ├── aws-lc-rs v1.13.0
│   │   │   │   │   │   │   ├── aws-lc-sys v0.28.0
│   │   │   │   │   │   │   ├── aws-lc-rs v1.13.0 (*)
│   │   │   ├── aws-smithy-observability v0.1.2
│   │   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-types v1.3.6
│   │   │   ├── aws-credential-types v1.2.2 (*)
│   │   │   ├── aws-smithy-async v1.2.5 (*)
│   │   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   │   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-sdk-sso v1.64.0
│   │   ├── aws-credential-types v1.2.2 (*)
│   │   ├── aws-runtime v1.5.6 (*)
│   │   ├── aws-smithy-async v1.2.5 (*)
│   │   ├── aws-smithy-http v0.62.0 (*)
│   │   ├── aws-smithy-json v0.61.3
│   │   │   └── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-smithy-runtime v1.8.1 (*)
│   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-types v1.3.6 (*)
│   ├── aws-sdk-ssooidc v1.65.0
│   │   ├── aws-credential-types v1.2.2 (*)
│   │   ├── aws-runtime v1.5.6 (*)
│   │   ├── aws-smithy-async v1.2.5 (*)
│   │   ├── aws-smithy-http v0.62.0 (*)
│   │   ├── aws-smithy-json v0.61.3 (*)
│   │   ├── aws-smithy-runtime v1.8.1 (*)
│   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-types v1.3.6 (*)
│   ├── aws-sdk-sts v1.65.0
│   │   ├── aws-credential-types v1.2.2 (*)
│   │   ├── aws-runtime v1.5.6 (*)
│   │   ├── aws-smithy-async v1.2.5 (*)
│   │   ├── aws-smithy-http v0.62.0 (*)
│   │   ├── aws-smithy-json v0.61.3 (*)
│   │   ├── aws-smithy-query v0.60.7
│   │   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-smithy-runtime v1.8.1 (*)
│   │   ├── aws-smithy-runtime-api v1.7.4 (*)
│   │   ├── aws-smithy-types v1.3.0 (*)
│   │   ├── aws-smithy-xml v0.60.9
│   │   ├── aws-types v1.3.6 (*)
│   ├── aws-smithy-async v1.2.5 (*)
│   ├── aws-smithy-http v0.62.0 (*)
│   ├── aws-smithy-json v0.61.3 (*)
│   ├── aws-smithy-runtime v1.8.1 (*)
│   ├── aws-smithy-runtime-api v1.7.4 (*)
│   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-types v1.3.6 (*)
├── aws-sdk-dynamodb v1.71.0
│   ├── aws-credential-types v1.2.2 (*)
│   ├── aws-runtime v1.5.6 (*)
│   ├── aws-smithy-async v1.2.5 (*)
│   ├── aws-smithy-http v0.62.0 (*)
│   ├── aws-smithy-json v0.61.3 (*)
│   ├── aws-smithy-runtime v1.8.1 (*)
│   ├── aws-smithy-runtime-api v1.7.4 (*)
│   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-types v1.3.6 (*)
├── aws-sdk-quicksight v1.81.0
│   ├── aws-credential-types v1.2.2 (*)
│   ├── aws-runtime v1.5.6 (*)
│   ├── aws-smithy-async v1.2.5 (*)
│   ├── aws-smithy-http v0.62.0 (*)
│   ├── aws-smithy-json v0.61.3 (*)
│   ├── aws-smithy-runtime v1.8.1 (*)
│   ├── aws-smithy-runtime-api v1.7.4 (*)
│   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-types v1.3.6 (*)
├── aws-sdk-secretsmanager v1.68.0
│   ├── aws-credential-types v1.2.2 (*)
│   ├── aws-runtime v1.5.6 (*)
│   ├── aws-smithy-async v1.2.5 (*)
│   ├── aws-smithy-http v0.62.0 (*)
│   ├── aws-smithy-json v0.61.3 (*)
│   ├── aws-smithy-runtime v1.8.1 (*)
│   ├── aws-smithy-runtime-api v1.7.4 (*)
│   ├── aws-smithy-types v1.3.0 (*)
│   ├── aws-types v1.3.6 (*)
├── aws-sdk-sts v1.65.0 (*)

Environment details (OS name and version, etc.)

Windows 11 Enterprise 23H2

Logs

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugThis issue is a bug.needs-triageThis issue or PR still needs to be triaged.potential-regressionMarking this issue as a potential regression to be checked by team member

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions