How to get source Error Message?

[lcmgh]

Hi! I have trouble retrieving the field that contains the error message User: arn:aws:sts::123:assumed-role/sso/noone is not authorized to perform: sts:SetSourceIdentity on resource: . I tried various things as accessing the source, mapping the service error but all without success

    let instances = match ec2_client.describe_instances().send().await {
        Ok(v) => v,
        Err(e) => {
            println!("error {:?}", e);


            match &e {
                aws_smithy_runtime_api::client::result::SdkError::DispatchFailure(de) => {
                 }
           }
    }
              

DispatchFailure(DispatchFailure { source: ConnectorError { kind: Other(None), source: ProviderError(ProviderError { source: ServiceError(ServiceError { source: Unhandled(Unhandled { source: ErrorMetadata { code: Some("AccessDenied"), message: Some("User: arn:aws:sts::123:assumed-role/sso/nobodyis not authorized to perform: sts:SetSourceIdentity on resource: arn:aws:iam::123:role/fpc/UserRO"), extras: Some({"aws_request_id": "xxx"}) }, 
meta: ErrorMetadata { code: Some("AccessDenied"), message: Some("User: arn:aws:sts::123:assumed-role/sso/nobody is not authorized to perform: sts:SetSourceIdentity on resource: arn:aws:iam::123:role/arole"), extras: Some({"aws_request_id": "xxx"}) } }), raw: Response { status: StatusCode(403), headers: Headers { headers: {"x-amzn-requestid": HeaderValue { _private: H0("xxx") }, "content-type": HeaderValue { _private: H0("text/xml") }, "content-length": HeaderValue { _private: H0("419") }, "date": HeaderValue { _private: H0("Mon, 26 Feb 2024 16:36:57 GMT") }} }, body: SdkBody { inner: Once(Some(b"<ErrorResponse xmlns=\"https://sts.amazonaws.com/doc/2011-06-15/\">\n  <Error>\n    <Type>Sender</Type>\n    <Code>AccessDenied</Code>\n    <Message>User: arn:aws:sts::123:assumed-role/sso/noone is not authorized to perform: sts:SetSourceIdentity on resource: arn:aws:iam::123:role/fpc/UserRO</Message>\n  </Error>\n  <RequestId>xxx</RequestId>\n</ErrorResponse>\n")), retryable: true }, extensions: Extensions { extensions_02x: Extensions, extensions_1x: Extensions } } }) }), connection: Unknown } })

[jdisanti]

You can use the ProvideErrorMetadata trait to directly access the error code and message.

[lcmgh]

I tried but e.g. e.code() returns None while you can see in the output from above (via println!("{e:?}")) each Code field contains Some.

[jdisanti]

Oh, because the error is coming from the credential provider. There isn't currently a way to access information about STS errors originating from credential providers.

What problem are you trying to solve?

[lcmgh]

I am working on a terminal user interface to list rds dbs and spawn tunneled IAM authenticated dbeaver/psql connections and I don't want to clutter the log window with very long messages but rather make it more human readable to let user quickly know what exactly went wrong (such as lacking of permissions).