Hi Pritha, The caps were set correctly. I actually discovered that the SHA1 hash in my ThumbprintList was wrong. I had to attach the python debugger to the find the real-issue because boto3 seems to suppress the error returned from the iam api. The radosgw response is pretty explicit about the real issue. Replacing the thumbprint with a valid one fixed my problem. I followed these instructions to get a valid thumbprint from my cert: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html V/r, -= Mat _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx