Skip to main content

AWS000 - AWS CLI Not Installed

Agent error code #AWS000 indicates that the agent could not find the aws binary on the host it is running on. The AWS backend drives EC2 security groups by shelling out to the AWS CLI, so without it no grant can be applied.

Common causes include:

  • The AWS CLI is not installed on the agent host
  • It is installed somewhere outside the agent service's PATH
  • The agent runs in a minimal container image that does not include it

Steps to Resolve

Install the AWS CLI

  1. Follow the AWS CLI v2 installation steps for the agent host's operating system
  2. Confirm the binary responds: aws --version

Check the Agent's PATH

The agent inherits the PATH of the service manager, not your login shell.

  1. Run command -v aws to find the binary, commonly /usr/local/bin/aws
  2. If that directory is not on the service PATH, add it in the unit file or symlink the binary somewhere already on the path
  3. Restart the agent so it picks up the change

Verify as the Agent's Own Account

Run the check as the service account rather than as yourself:

sudo -u knocknoc aws --version

For the full setup, see the backends chapter.

Back to top