@AndrewCopeland
Please find the requested details attached. I have only master up and running and not using the followers for authentication. I see here that only authn is enabled in the info. This is causing the error message. how can this be corrected?
“services”: {
“evoke”: {
“desired”: “i”,
“status”: “i”,
“err”: null,
“name”: “conjur-evoke”,
“version”: “5.15.1.1-4af4f30”,
“arch”: “amd64”
},
“ldap-sync”: {
“desired”: “i”,
“status”: “i”,
“err”: null,
“name”: “conjur-ldap-sync”,
“version”: “2.1.4.0-3c52a79”,
“arch”: “amd64”
},
“possum”: {
“desired”: “i”,
“status”: “i”,
“err”: null,
“name”: “conjur-possum”,
“version”: “1.4.6.15-63d5156”,
“arch”: “amd64”
},
“ui”: {
“desired”: “i”,
“status”: “i”,
“err”: null,
“name”: “conjur-ui”,
“version”: “2.10.16.0-2c3911b7”,
“arch”: “amd64”
}
},
“container”: “a11bf9e10070”,
“role”: “master”,
“configuration”: {
“conjur”: {
“role”: “master”,
“account”: “CAU”,
“hostname”: “ip-172-31-15-132.us-east-2.compute.internal”,
“master_altnames”: [
“ip-172-31-15-132.us-east-2.compute.internal”,
“localhost”,
“conjur”
]
}
},
“authenticators”: {
“installed”: [
“authn”,
“authn-iam”,
“authn-k8s”,
“authn-ldap”,
“authn-oidc”
],
“configured”: [
“authn”,
“authn-iam/prod”
],
“enabled”: [
“authn”
]
}
}
Policy file for authenticator
policy id needs to match the convention conjur/authn-iam/<service ID>
- !policy
id: conjur/authn-iam/prod
body:
- !webservice
- !group clients
- !permit
role: !group clients
privilege: [ read, authenticate ]
resource: !webservice
Host creation yaml file
- !policy
id: myapp
body:
- &variables
- !variable database/username
- !variable database/password
# Create a group that will have permission to retrieve variables
- !group secrets-users
# Give the `secrets-users` group permission to retrieve variables
- !permit
role: !group secrets-users
privilege: [ read, execute ]
resource: *variables
# Create a layer to hold this application's hosts
- !layer
# The host ID needs to match the AWS ARN of the role we wish to authenticate.
- !host <awsaccountname>/conjur-role
# Add our host into our layer
- !grant
role: !layer
member: !host <awsaccounname>/conjur-role
# Give the host in our layer permission to retrieve variables
- !grant
member: !layer
role: !group secrets-users
. Those environment variables don’t look right 
.