title: AWS APP MESH ENVOY sidecar [error] Could not retrieve credentials listing from the instance metadata
body: <p>I'm using AWS App Mesh with ECS Fargate. Unfortunately in the logs of the envoy sidecar I see errors like:</p>
  <blockquote>
  <pre><code>[error][aws] [source/extensions/common/aws/credentials_provider_impl.cc:94] Could not retrieve credentials listing from the instance metadata
  </code></pre>
  </blockquote>
  <blockquote>
  <pre><code>[1][warning][config] [bazel-out/k8-opt/bin/source/common/config/_virtual_includes/grpc_stream_lib/common/config/grpc_stream.h:93] StreamAggregatedResources gRPC config stream closed: 16, Missing Authentication Token
  </code></pre>
  </blockquote>
  <p>Permission: AWSAppMeshFullAccess</p>
  <p>I already checked the <a href="https://docs.aws.amazon.com/app-mesh/latest/userguide/app-mesh-ug.pdf" rel="nofollow noreferrer">AWS App Mesh Userguide</a></p>
  <pre><code>{
  
   &quot;name&quot; : &quot;envoy&quot;,
   &quot;image&quot; : &quot;840364872350.dkr.ecr.us-west-2.amazonaws.com/aws-appmeshenvoy:v1.15.1.0-prod&quot;,
   &quot;essential&quot; : true,
   &quot;environment&quot; : [
   {
   &quot;name&quot; : &quot;APPMESH_VIRTUAL_NODE_NAME&quot;,
   &quot;value&quot; : &quot;mesh/apps/virtualNode/serviceB&quot;
   },
   {
   &quot;name&quot;: &quot;ENABLE_ENVOY_XRAY_TRACING&quot;,
   &quot;value&quot;: &quot;1&quot;
   }
   ],
   &quot;healthCheck&quot; : {
   &quot;command&quot; : [
   &quot;CMD-SHELL&quot;,
   &quot;curl -s http://localhost:9901/server_info | grep state | grep -q LIVE&quot;
   ],
   &quot;interval&quot; : 5,
   &quot;retries&quot; : 3,
   &quot;startPeriod&quot; : 10,
   &quot;timeout&quot; : 2
   },
   &quot;memory&quot; : &quot;500&quot;,
   &quot;user&quot; : &quot;1337&quot;,
   &quot;portMappings&quot;: [
        {
          &quot;containerPort&quot;: 9901,
          &quot;protocol&quot;: &quot;tcp&quot;
        },
        {
          &quot;containerPort&quot;: 15000,
          &quot;protocol&quot;: &quot;tcp&quot;
        },
        {
          &quot;containerPort&quot;: 15001,
          &quot;protocol&quot;: &quot;tcp&quot;
        }
      ],
   &quot;ulimits&quot;: [
        {
          &quot;softLimit&quot;: 15000,
          &quot;hardLimit&quot;: 15000,
          &quot;name&quot;: &quot;nofile&quot;
        }
      ],
   &quot;requiresCompatibilities&quot; : [ &quot;FARGATE&quot; ],
   &quot;taskRoleArn&quot; : &quot;arn:aws:iam::XXXXXXXXXXXX:role/ecsTaskRole&quot;,
   &quot;executionRoleArn&quot; : &quot;arn:aws:iam::XXXXXXXXXXXX:role/ecsTaskExecutionRole&quot;,
   &quot;networkMode&quot; : &quot;awsvpc&quot;
   }
  </code></pre>