AWS s3 sink permission issue

[shamj]

Hello,

I am trying to send logs to s3 using vector sink aws_s3.

I have s3 bucket test and correesponding role created. Role has trusted policy and sts:AssumeRole action associated.

However on deploying the configuration, below errors are seen:

{"component_id":"s3_sink","component_kind":"sink","component_name":"s3_sink","component_type":"aws_s3","error":"failed to construct request: Failed to load credentials from the credentials provider: An error occurred while loading credentials: Error { code: "AccessDenied", message: "User: arn:aws:sts::1:assumed-role/test/web-identity-token-1 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::1:role/test" }",

Below is the config :

"s3_sink": {
            "type": "aws_s3",
            "inputs": [
                "test"
            ],
            "bucket": "test",
            "region": "us-west-2",
            "compression": "gzip",
            "encoding": {
                "codec": "text"
            },
            "auth": {
                "assume_role": "arn:aws:iam::1:role/test"
            }
        }

Please advise.