Error: Unable to Validate Write/Read Access Test. The Security Token Is Invalid

Issue

The Managed Data Lake Service (MDLS) destination setup test fails with the following error:

Unable to validate write/read access test. The security token included in the request is invalid. (Service: STS, Status Code: 403)

Environment

• Managed Data Lake Service (MDLS)
• Destination type: Amazon S3

Resolution

To resolve this issue:

1. In Fivetran, go to your MDLS destination page.
2. In the top right, select the more options menu, then click Edit connection.
3. In the Bucket and Bucket Region fields, specify an S3 bucket in a supported Fivetran AWS region.
4. Click Save & Test.

Using a supported region also prevents unsupported cross-region processing and potential S3 egress charges.

Cause

This issue occurs when you specify an S3 bucket in an AWS opt-in region where Fivetran doesn't support MDLS processing. During the setup test, the AWS STS AssumeRole request in the bucket's region fails and returns the above error.