aws-amplify / amplify-backend

Home to all tools related to Amplify's code-first DX (Gen 2) for building fullstack apps on AWS
Apache License 2.0
185 stars 62 forks source link

handle not authorized to perform on resource error #2258

Closed rtpascual closed 1 day ago

rtpascual commented 1 day ago

Problem

If the AWS account used does not have all permissions to perform deployment (not using the AmplifyBackendDeployFullAccess permission policy), deployment fails with an error like:

Error: Stack <stack> failed: ValidationError: User: <user-arn> is not authorized to perform: ssm:GetParameters on resource: <resource-arn> because no identity-based policy allows the ssm:GetParameters action

Issue number, if available:

Changes

Corresponding docs PR, if applicable:

Validation

Added test.

Checklist

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

changeset-bot[bot] commented 1 day ago

🦋 Changeset detected

Latest commit: 549bc6e73899e43d46d1ea854460ab3729109a4f

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package | Name | Type | | ----------------------------- | ----- | | @aws-amplify/backend-deployer | Patch |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR