ClientError: The security token included in the request is invalid.

[OFilipovs]

Hello

I am having trouble with authentication.

I get this error:

"ClientError: An error occurred (InvalidClientTokenId) when calling the AssumeRole operation: The security token included in the request is invalid."

Can you point me in the direction where my credentials are wrong, since I am new to AWS.

Thank you

[FA5I]

This means that you have a wrong value for one of the fields in the config.yaml file you created:

  refresh_token: 
  lwa_app_id: 
  lwa_client_secret: 
  aws_secret_key: 
  aws_access_key: 
  role_arn: 

The issue is you appeared to have the wrong lwa_app_id I think

[OFilipovs]

Hello,

Thank you for your reply.

I finally got time to get back to this. I redid the whole app registration on seller central and IAM user registration on AWS, however still the same error: "An error occurred (InvalidClientTokenId) when calling the AssumeRole operation: The security token included in the request is invalid."

When I register my app on Seller Central, I use for IAM ARN link from AWS > Roles > role I created using Amazon SP API guide on github step4

refresh_token= '' generated from Seller Central
lwa_app_id='amzn1.application-oa2-client' from Seller Central > view LWA credentials
lwa_client_secret='84******', from Seller Central > view LWA credentials
aws_secret_key='mJ********', downloaded from AWS when creating IAM user
aws_access_key='<AK*******', downloaded from AWS when creating IAM user 
role_arn='arn:aws:iam:******', AWS > Roles > role I created using Amazon SP API  guide on github [Step4]

My full code:

`from datetime import date

from sp_api import api
from sp_api import base
from sp_api import auth
from sp_api.api import Orders

credentials=dict(
refresh_token='',
lwa_app_id='',
lwa_client_secret='',
aws_secret_key='',
aws_access_key='',
role_arn='',
)

this_date = date(2021, 4, 9)

resp = Orders(credentials=credentials).get_orders(CreatedAfter=(this_date.isoformat()))

print(resp)`

[eliyaba]

Hi @OFilipovs did you solve this? I get the same error from lambda environment (runs fine from local)