aws-samples / aws-iam-identity-center-extensions

This solution is intended for enterprises that need a streamlined way of managing user access to their AWS accounts. Using this solution, your identity and access management teams can extend AWS SSO functionality by automating common access management and governance use cases
MIT License
65 stars 24 forks source link

Trio of exception emails when uploading new permission sets #111

Open allquixotic opened 1 year ago

allquixotic commented 1 year ago

Currently on the latest 3.1.8 PR commit. We're doing a migration from "packed" inline policies (where we migrated IAM CMPs into SSO permission sets inline) to native CMP support in SSO. With a 2 second sleep between each S3 file upload, I started getting the following error emails:

exceptionName: "ConflictException" exceptionMessage: "There is a conflicting operation in process." <---- ???? I don't know why this is happening.

exceptionName: "ThrottlingException" exceptionMessage: "There are too many requests processing. Please try again later." <---- Understandable, but ideally SQS should catch this and just queue up the requests...? Shouldn't it? If it's up to the S3 uploader to figure out throttling, that's not ideally user friendly...

exceptionName: "Unhandled exception" exceptionMessage: "TimeoutError"

All of these occur in env-permissionSetTopicProcessor.