Connecting SourceTree to AWS CodeCommit: HTTP error 403

[ZitingWei]

I'm using SourceTree to work with git on Mac OS, and choose AWS CodeCommit as the remote hosting server.

Following these steps for HTTPs connection between AWS and my local repo,

I got errors like: 

• abort: HTTP Error 403: Forbidden aws --profile default codecommit credential-helper $@ get: aws: command not found fatal: unable to access 'https://git-codecommit.us-east-1.amazonaws.com/v1/repos/my-git-repo/': The requested URL returned error: 403
  

Refer to this question for more about my problem.

Thanks for any advice!

[Erik Andersen]

I just found this answer here (https://geekprotem.com/2015/07/10/aws-codecommit-with-sourcetree/)

After following the setup steps for AWS CLI on Amazon's website, the final step to get this to work was editing my repository's config file in SourceTree to include the following:

[credential]
helper = /usr/local/bin/aws codecommit credential-helper $@
UseHttpPath = true

[Diego Jancic]

Thanks. For Windows, I had to put `helper = "C:/Progra~1/Amazon/AWSCLI/aws.exe" codecommit credential-helper $@`. Hope it helps to anyone.

[Kim T]

AWS CLI guide says to run:

git config --global credential.helper '!aws codecommit credential-helper $@'

Sourcetree doesn't have aws-cli in path, so you should instead use the exact path to aws-cli (this example is for mac):

git config --global credential.helper '/usr/local/bin/aws codecommit credential-helper $@'

[James Cobalt]

Though everything worked as expected in terminal and Github Desktop, for Sourcetree I had to create symlinks between the aws helper application (mine was in my Python directory but type "which aws" in terminal to find yours) and the git bin directory. If you are on a Mac and using the embedded git in Sourcetree, then add the aws symlink into 

/Applications/SourceTree.app/Contents/Resources/git_local/bin/

If you are using the system git, then it probably goes into

/usr/local/git/bin/

[Steffen Opel _Utoolity_]

I have not tested this, but given AWS CodeCommit facilitates a credential helper too and the error being`command not found`, I would assume you are affected by the same issue outlined in the SourceTree Knowledge Base article Credential helpers "git: 'credential-osxkeychain' is not a git command. See 'git --help'."

The error [...] occurs because Git calls this helper and cannot find it meaning it has been defined and yet not found on the PATH. In terms of SourceTree as of version 1.6.3 this is nothing to worry about. There's two ways to stop this from happening.

1. Not recommended, but if you're solely using SourceTree for everything you could remove the 'credential' setting from the /usr/local/git/etc/gitconfig config. This is a quick and easy method, but it does mean operations at the terminal may not be able to authenticate.

2. Recommended, create a symlink between git-credential-osxkeychain in the SourceTree app resources and your local git install.

   ln -s /usr/local/git/bin/git-credential-osxkeychain /Applications/SourceTree.app/Contents/Resources/git_local/bin/git-credential-osxkeychain

Of course, since AWS CodeCommit requires the credential helper to be in place, only solution 2 is conceptually applicable for your scenario and you need to adjust the link source and targets as appropriate for the CodeCommit credential helper.