I apologize for the confusion. I am able to use Amazon’s CLI tool successfully after configuring the proxy variable as illustrated with the #aws iam, get-user command. Okta’s AWSCLI tool fails to connect with the connection timeout error.
I did perform a packet capture while attempting to connect using Okta’s AWSCLI to try and identify where the connection is timing out, and it appears to be while connection to Okta Preview. The image below shows the client and server handshake, followed by repeated retransmissions and eventually a client reset when the server fails to respond.
.okta>java -classpath ".okta\*" com.okta.tools.awscli
Username: XXXX
Password:
Exception in thread "main" org.apache.http.conn.ConnectTimeoutException: Connect to xxxxx.oktapreview.com:443
[xxxxx.oktapreview.com/50.17.226.139, xxxxx.oktapreview.com/54.225.76.2, xxxxx.oktapreview.com/54.225.80.174,
xxxxx.oktapreview.com/50.17.226.145, xxxxx.oktapreview.com/54.225.80.210, xxxxx.oktapreview.com/54.225.81.89]
failed: Read timed out
