[aws] Disable Checksum Validation for FIPS is Enabled (#47105) (#47138)

mergify[bot] · kaiyan-sheng · web-flow · commit cd39f66ccd83 · 2025-10-16T08:22:52.000-06:00
(cherry picked from commit d9f2bad) Co-authored-by: kaiyan-sheng <kaiyan.sheng@elastic.co>
diff --git a/x-pack/filebeat/input/awss3/config.go b/x-pack/filebeat/input/awss3/config.go
@@ -308,6 +308,8 @@ func (c config) s3ConfigModifier(o *s3.Options) {
 func (c config) sqsConfigModifier(o *sqs.Options) {
 	if c.AWSConfig.FIPSEnabled {
 		o.EndpointOptions.UseFIPSEndpoint = awssdk.FIPSEndpointStateEnabled
+		// Disable checksum validation temporarily till https://github.com/golang/go/issues/74630#issuecomment-3228203391 is implemented
+		o.DisableMessageChecksumValidation = true
 	}
 	if c.AWSConfig.Endpoint != "" {
 		//nolint:staticcheck // not changing through this PR
diff --git a/x-pack/metricbeat/module/aws/cloudwatch/metadata/sqs/sqs.go b/x-pack/metricbeat/module/aws/cloudwatch/metadata/sqs/sqs.go
@@ -22,6 +22,8 @@ func AddMetadata(regionName string, awsConfig awssdk.Config, fips_enabled bool,
 	svc := sqs.NewFromConfig(awsConfig, func(o *sqs.Options) {
 		if fips_enabled {
 			o.EndpointOptions.UseFIPSEndpoint = awssdk.FIPSEndpointStateEnabled
+			// Disable checksum validation temporarily till https://github.com/golang/go/issues/74630#issuecomment-3228203391 is implemented
+			o.DisableMessageChecksumValidation = true
 		}
 
 	})

Original file line number	Diff line number	Diff line change
`@@ -308,6 +308,8 @@ func (c config) s3ConfigModifier(o *s3.Options) {`
`308`	`308`	`func (c config) sqsConfigModifier(o *sqs.Options) {`
`309`	`309`	`if c.AWSConfig.FIPSEnabled {`
`310`	`310`	`o.EndpointOptions.UseFIPSEndpoint = awssdk.FIPSEndpointStateEnabled`
	`311`	`+ // Disable checksum validation temporarily till https://github.com/golang/go/issues/74630#issuecomment-3228203391 is implemented`
	`312`	`+ o.DisableMessageChecksumValidation = true`
`311`	`313`	`}`
`312`	`314`	`if c.AWSConfig.Endpoint != "" {`
`313`	`315`	`//nolint:staticcheck // not changing through this PR`
Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,8 @@ func AddMetadata(regionName string, awsConfig awssdk.Config, fips_enabled bool,`
`22`	`22`	`svc := sqs.NewFromConfig(awsConfig, func(o *sqs.Options) {`
`23`	`23`	`if fips_enabled {`
`24`	`24`	`o.EndpointOptions.UseFIPSEndpoint = awssdk.FIPSEndpointStateEnabled`
	`25`	`+ // Disable checksum validation temporarily till https://github.com/golang/go/issues/74630#issuecomment-3228203391 is implemented`
	`26`	`+ o.DisableMessageChecksumValidation = true`
`25`	`27`	`}`
`26`	`28`
`27`	`29`	`})`