AWS-bookstore-demo-app failing to deploy

aws-samples / aws-bookstore-demo-app

AWS Bookstore Demo App is a full-stack sample web application that creates a storefront (and backend) for customers to shop for fictitious books. The entire application can be created with a single template. Built on AWS Full-Stack Template.

MIT No Attribution

623 stars 306 forks source link

AWS-bookstore-demo-app failing to deploy #29

Closed pierrerajha closed 2 years ago

pierrerajha commented 2 years ago

The template would't deploy due to limitted access to sd-aws-wildrydes-us-west-2/aws-serverless-codecommit-seeder.zip.

Cloudformation Error:

CREATE_FAILED | Resource handler returned message: "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for fsd-aws-wildrydes-us-west-2/aws-serverless-codecommit-seeder.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: Lambda, Status Code: 403, Request ID: 807f6f50-152f-49e2-b2e2-8848d6376073, Extended Request ID: null)" (RequestToken: 0b0a339e-fb38-550c-b2ae-2d9d2605a2b9, HandlerErrorCode: AccessDenied)

This is causing SeederFunction to fail to deploy.

To reproduce, simply deploy the the project with cloudformation.

jrbracey commented 2 years ago

Also having same issue

ja5on6 commented 2 years ago

Also having same issue

HalinGG commented 2 years ago

I face the same issue. It appears that bookstore-webapp.zip is corrupted. I tried downloading but unzipping does not work for: https://s3.amazonaws.com/aws-bookstore-demo/bookstore-webapp.zip

Full error in cloudformation: Resource handler returned message: "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for fsd-aws-wildrydes-us-west-2/aws-serverless-codecommit-seeder.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: Lambda, Status Code: 403, Request ID: 5d442ae3-293e-48a0-a1d7-48d7b3eb44cf, Extended Request ID: null)" (RequestToken: 1440b860-5dbe-f6d2-1e85-15099426e764, HandlerErrorCode: AccessDenied)

... and my cloudformation IAM role has AWS managed policy for administrator full access.

Muksvso commented 2 years ago

I have the same issue, Followed the VPC solution to delete the default VPC in a closed issue here. Worth noting I am new to AWS and using an Always free account. Also I didn't put anything in IAM roles and let it use my identity as an owner and checked the box to confirm that IAM has my permissions to assume my identity/use my access for resource creation. It is the very same message as other posters but just to confirm :)

Resource handler returned message: "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for fsd-aws-wildrydes-us-west-2/aws-serverless-codecommit-seeder.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: Lambda, Status Code: 403, Request ID: 1457a6c7-9d23-4891-a68c-a9606c7805f5, Extended Request ID: null)" (RequestToken: 75ec818d-94da-fb62-7ac6-ccc1968680e2, HandlerErrorCode: AccessDenied)

expresslaw commented 2 years ago

Same issure here..... Apparantly whoever owns the buckets for this code (fsd-aws-wildrydes-/) has disabled GetObject for either public read or even authenticated users. This is very disappointing as it looks to be a great demo and I'd really like to run it.

For what it's worth the project on which this is based (aws-full-stack-template) has the exact same problem.

jimmydued commented 2 years ago

Can we have solution around this? We have this issue opened from last 4 months. We really like this repo and would like to proceed further but as mentioned above due to S3 is not accessible it is not allowing us to finish the installation..

sebastienpiette commented 2 years ago

Same issue here. No Update yet as of 28 March 2022 ? Whoever knows the owner of the failing bucket...please help :))) fsd-aws-wildrydes-eu-central-1/aws-serverless-codecommit-seeder.zip

triggan commented 2 years ago

Hi all,

I've fixed a number of issues with the stack and updated the primary template. This should now deploy successfully. Apologies for the lack of response. We're in the process of reviving this stack for some upcoming workshops.

Please feel free to open any new issues that you might encounter.

waelsv commented 1 year ago

@triggan I'm facing this issue with the TODO app that uses the template below: https://github.com/amazon-archives/aws-full-stack-template/blob/master/template/master-fullstack.yaml Any chance you can help with this?

Resource handler returned message: "Your access has been denied by S3, please make sure your request credentials have permission to GetObject for fsd-aws-wildrydes-eu-west-1/aws-serverless-codecommit-seeder.zip. S3 Error Code: AccessDenied. S3 Error Message: Access Denied (Service: Lambda, Status Code: 403, Request ID: 625aa4aa-06fd-4193-898d-237584da6f77)" (RequestToken: 9daf6117-b114-a876-f358-1b321a272f27, HandlerErrorCode: AccessDenied)