InvalidSignatureException error

Our working environment suddenly stopped being able to send email. In troubleshooting, we ran across the following message when sending the test email:

Error executing "SendEmail" on "https://email.us-east-2.amazonaws.com/v2/email/outbound-emails"; AWS HTTP error: Client error: POST https://email.us-east-2.amazonaws.com/v2/email/outbound-emails resulted in a 403 Forbidden response: {"message":"The request signature we calculated does not match the signature you provided. Check your AWS Secret Access (truncated...) InvalidSignatureException (client): The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details. - {"message":"The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details."}

We investigated the credentials and they are ok. After reflecting on the error message, we noticed the (truncated…) part, and suspected modified headers.

Upon reviewing the error logs, we encountered the following:

2023/04/18 22:16:31 [error] 959#959: *54 FastCGI sent in stderr: "PHP message: PHP Warning:  is_readable(): open_basedir restriction in effect. File(/home/web/.aws/config) is not within the allowed path(s): (/srv/www/:/tmp) in /srv/www/domain.com/releases/20221213120938/web/app/plugins/wp-ses/vendor/Aws3/Aws/DefaultsMode/ConfigurationProvider.php on line 126" while reading response header from upstream, client: 172.71.242.133, server: domain.com, request: "POST /wp/wp-admin/admin-ajax.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm-wordpress.sock:", host: "domain.com", referrer: "https://domain.com/wp/wp-admin/options-general.php?page=wp-offload-ses"

It seems the plugin is looking for an AWS config in /home/web/ but there isn’t any such file on the server.

• This topic was modified 1 year, 7 months ago by sangemaru.