# Deploy fails with Aws::S3::Errors::SignatureDoesNotMatch

**URL:** https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835
**Category:** Deployment
**Created:** [November 8, 2019, 12:36am UTC](https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835 "2019-11-08T00:36:06Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![rifkegribenes](https://sea1.discourse-cdn.com/flex015/user_avatar/travis-ci.community/rifkegribenes/32/8898_2.png) [@rifkegribenes](https://travis-ci.community/u/rifkegribenes)
#### Post date: [November 8, 2019, 12:36am UTC](https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835/1 "2019-11-08T00:36:07Z")

</div>

[https://travis-ci.org/seiu503/member-app-2019/builds/609016742](https://travis-ci.org/seiu503/member-app-2019/builds/609016742) (error at line 1984)

my last few builds have failed with this message:  
`/home/travis/.rvm/gems/ruby-2.4.5/gems/aws-sdk-core-2.11.393/lib/seahorse/client/plugins/raise_response_errors.rb:15:in `call’: The request signature we calculated does not match the signature you provided. Check your key and signing method. (Aws::S3::Errors::SignatureDoesNotMatch)`

i didn’t make any changes to these keys and they have been working fine for months. when the build failed i deleted and re-added the AWS key and secret as Travis repo-specific ENV variables, then when that didn’t work i generated a new key and secret in the AWS console, added them in Travis Settings, and tried again (twice!). still doesn’t work. neither my key nor secret has any bash special characters.

when i google this error message i see a bunch of issues from 4-5 years ago where the fix was updating the aws sdk gem or resetting the system time on the server. i have confirmed server time is correct and don’t know how or where i would need to update the gem, but most of these issues were from 2014-15 so not sure if that’s even relevant any more.

any idea why this would still be failing?

---

<div class="post-metadata">

### Author: ![shazi7804](https://sea1.discourse-cdn.com/flex015/user_avatar/travis-ci.community/shazi7804/32/3084_2.png) [@shazi7804](https://travis-ci.community/u/shazi7804)
#### Post date: [November 8, 2019, 4:48am UTC](https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835/2 "2019-11-08T04:48:42Z")

</div>

+1

I has same issue.

---

<div class="post-metadata">

### Author: ![BanzaiMan](https://sea1.discourse-cdn.com/flex015/user_avatar/travis-ci.community/banzaiman/32/67_2.png) [@BanzaiMan](https://travis-ci.community/u/BanzaiMan)
#### Post date: [November 8, 2019, 3:22pm UTC](https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835/4 "2019-11-08T15:22:32Z")

</div>

> <https://github.com/seiu503/member-app-2019/blob/08beed21fcada8ff8443d79b09bb4041b30c648b/.travis.yml#L22-L23>

You are using the plain text value in the `secure` value. We rolled out additional changes to data processing so that we can prevent accidental exposures of these secrets.

Your configuration was working before because we were passing through values when the decrpytion fails in such a case.

Please try changing this configuration to:

```auto
secret_acces_key: $AWS_SECRET_KEY

```

and report the results.

---

<div class="post-metadata">

### Author: ![rifkegribenes](https://sea1.discourse-cdn.com/flex015/user_avatar/travis-ci.community/rifkegribenes/32/8898_2.png) [@rifkegribenes](https://travis-ci.community/u/rifkegribenes)
#### Post date: [November 8, 2019, 4:29pm UTC](https://travis-ci.community/t/deploy-fails-with-aws-signaturedoesnotmatch/5835/5 "2019-11-08T16:29:41Z")

</div>

that worked! thank you!
