C# .NET Core worker-启用Docker Compose后，我的服务可以'；t从appsettings.json读取IAM凭据

我正在构建一个小型的.NET Core worker服务来读取AWS SQS队列中的消息。为此，它需要访问和密钥形式的IAM凭据。我最初是以docker容器的形式运行这个项目的，它工作得很好。我希望能够多次运行此容器，从而使同一服务具有多个实例。我在VisualStudio中启用了Docker Compose，它将基本Docker Compose YAML文件添加到项目中。现在，当我尝试在调试中运行解决方案时，出现以下错误：

An exception of type 'Amazon.Runtime.AmazonServiceException' occurred in System.Private.CoreLib.dll but was not handled in user code: 'Unable to get IAM security credentials from EC2 Instance Metadata Service.'

我假设这是因为现在解决方案无法从我的appSettings.json中读取访问和密钥，但我不确定如何解决这个问题

这是我的文件

FROM mcr.microsoft.com/dotnet/core/runtime:3.1-buster-slim AS base
WORKDIR /app

FROM mcr.microsoft.com/dotnet/core/sdk:3.1-buster AS build
WORKDIR /src
COPY ["WorkerServiceDocker.csproj", ""]
RUN dotnet restore "./WorkerServiceDocker.csproj"
COPY . .
WORKDIR "/src/."
RUN dotnet build "WorkerServiceDocker.csproj" -c Release -o /app/build

FROM build AS publish
RUN dotnet publish "WorkerServiceDocker.csproj" -c Release -o /app/publish

FROM base AS final
WORKDIR /app
RUN mkdir -p /app/logging
COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "WorkerServiceDocker.dll"]

下面是由VisualStudio创建的docker compose文件

version: '3.4'

services:
  workerservicedocker:
    image: ${DOCKER_REGISTRY-}workerservicedocker
    build:
      context: .
      dockerfile: Dockerfile

失败的方法是：

public async void TriggerMessageGetAsync(string queueUrl, int pollingTime)
{
    var _messages = await GetMessagesAsync(queueUrl, pollingTime);
    if (_messages.Count == 0)
    {
        _logger.LogInformation($"No messages found.");
    }
    else
    {
        foreach (var message in _messages)
        {
            _logger.LogInformation($"Message {message.MessageId} received OK");
        }
    }
}

我的配置是从Program.cs中的appSettings.json加载的

public class Program
{
    public static void Main(string[] args)
    {
        Session.InstanceGuid = Guid.NewGuid().ToString();

        File.Create("init.log").Close();
        var logWriter = new StreamWriter("init.log");
        logWriter.WriteLine("Assembly Path: " + Path.GetDirectoryName(Assembly.GetEntryAssembly().Location));
        logWriter.WriteLine($"Session Guid: {Session.InstanceGuid}");
        logWriter.WriteLine($"Container DateTime: {DateTime.Now}");
        logWriter.Dispose(); 
        CreateHostBuilder(args).Build().Run();
    }

    public static IHostBuilder CreateHostBuilder(string[] args) =>
        Host.CreateDefaultBuilder(args)
            .ConfigureServices((hostContext, services) =>
            {
                services.AddHostedService<Worker>();
                services.AddSingleton<ILogger, Logger>(); // Using my own basic wrapper around NLog for the moment, pumped to CloudWatch.
                services.AddAWSService<IAmazonSQS>();
            });
}

AWSSDK:信息：在IConfiguration中找到AWS选项 AWSSDK:信息：使用AWS SDK的默认凭据搜索找到凭据

---

我不确定这个问题还包括什么，但我希望有人能提供帮助。我显然缺少一些配置或选项，这些配置或选项确保可以从appSettings.json文件中读取访问和密钥。正如我所说的，当我从DockerFile将其作为单个docker容器运行时，它工作得很好

我看不出您实际上在哪里指示AWS使用这些凭证，因此我将作为一个可能的问题来解决这个问题

首先，您的appsettings.json对于aws creds应采用以下格式：

"AWS": {        
    "AccessKey": "abc",         
    "SecretKey": "xyz",         
    "Region": "ksjs"    
},

然后尝试此解决方案（在初始化aws服务之前显式设置环境变量）

"AWS": {        
    "AccessKey": "abc",         
    "SecretKey": "xyz",         
    "Region": "ksjs"    
},