AWS lambda 函数失败 - Python

Aws lambda function failing - Python

这是我遇到的一个非常奇怪的问题,如果有人能提供一些指导,我将不胜感激。我正在尝试从 web_token.py 模块访问 request_url 的值。

当我只在 pycharm 上尝试 运行 web_token.py 并打印 request_url 时,它工作正常并生成 url。我压缩了这两个文件并将其上传到 lambda 函数,但在测试时我收到错误 "Unable to import module 'retrieve_accounts': No module named boto.sts"。我什至尝试将 web_token.py 的代码放在 retrieve_accounts.py 中,但得到了同样的错误。我确信我遗漏了一些非常基本的东西它看起来 boto.sts 在 运行 宁 python 脚本时没有被识别。有人可以给一些指导吗?谢谢你!

retrieve_accounts.py

import boto3
import web_token

def get_account(event, context):

client = boto3.client('dynamodb')
NameID = "testname@org.com"
ManagerEmail = "test1@eorg.com"
response = client.scan(
    TableName='Sandbox-Users',
    ScanFilter={
        'NameID': {
            'AttributeValueList': [
                {
                    'S': NameID,
                },
            ],
            'ComparisonOperator': 'EQ'
        }
    }
)
if response["Count"] > 0:
    client = boto3.client('dynamodb')
    response = client.get_item(
        Key={
            'NameID': {
                'S': NameID,
            },
            'ManagerEmail': {
                'S': ManagerEmail,
            },
        },
        TableName='Sandbox-Users',
    )
    return web_token.request_url ----------->here

else:
    response = client.put_item(
        Item={
            'NameID': {
                'S': NameID,
            },
            'ManagerEmail': {
                'S': ManagerEmail,
            }
        },
        TableName='Sandbox-Users'
    )
    return "Create Account"

web_token.py

import httplib
import urllib, json
from boto.sts import STSConnection -------->Error here

sts_connection = STSConnection()
assumed_role_object = sts_connection.assume_role(
role_arn="arn:aws:iam::454084028794:role/AMPSandboxRole",
role_session_name="AssumeRoleSession"
)

# Step 3: Format resulting temporary credentials into JSON

json_string_with_temp_credentials = '{'
json_string_with_temp_credentials += '"sessionId":"' + 
assumed_role_object.credentials.access_key + '",'
json_string_with_temp_credentials += '"sessionKey":"' + 
assumed_role_object.credentials.secret_key + '",'
json_string_with_temp_credentials += '"sessionToken":"' + 
assumed_role_object.credentials.session_token + '"'
json_string_with_temp_credentials += '}'

# Step 4. Make request to AWS federation endpoint to get sign-in token. 
Construct the parameter string with the sign-in action request, a 12-hour session duration, and the JSON 
   document with temporary credentials as parameters.

request_parameters = "?Action=getSigninToken"
   request_parameters += "&SessionDuration=43200"
   request_parameters += "&Session=" + 
   urllib.quote_plus(json_string_with_temp_credentials)
   request_url = "/federation" + request_parameters
   conn = httplib.HTTPSConnection("signin.aws.amazon.com")
   conn.request("GET", request_url)
   r = conn.getresponse()
   # Returns a JSON document with a single element named SigninToken.
   signin_token = json.loads(r.read())
   request_parameters = "?Action=login"
   request_parameters += "&Issuer=sandbox.com"
   request_parameters += "&Destination=" + 
   urllib.quote_plus("https://console.aws.amazon.com/")
   request_parameters += "&SigninToken=" + signin_token["SigninToken"]
   request_url = "https://signin.aws.amazon.com/federation" + 
   request_parameters

AWS Lambda Python 环境包括 boto3(和 botocore)。它们不包括较旧的 bo​​to(boto3 的前身),因此导入失败。

您可以在上传中包含 boto,但如果可以避免,不建议混合使用 boto 和 boto3。使用其中之一,最好是boto3。