You can show error responses from the Amazon API in the PingFederate server log.

  1. Open <pf_install>/pingfederate/server/default/conf/log4j2.xml for editing.
  2. In the <Loggers> section, add the following lines. Save the file.
    <Logger name="com.pingidentity.shaded.aws.apache.wire" level="DEBUG" />
    <Logger name="software.amazon.awssdk" level="DEBUG" />