aws-samples / data-lake-as-code

Data Lake as Code, featuring ChEMBL and OpenTargets
MIT No Attribution
166 stars 44 forks source link

starterAdminPermission Invalid principal #17

Open nikita-sheremet-clearscale opened 3 years ago

nikita-sheremet-clearscale commented 3 years ago

Build scripts call aws sts get-caller-identity and then generate role arn by user arn. Looks very strange - why role name should be related with current user name? Could you please add explanation about this? For now I got error: starterAdminPermission Invalid principal, arn: arn:aws:iam::111111111111:role/user.name (Service: AWSLakeFormation; Status Code: 400; Error Code: InvalidInputException; Request ID: 32d6e4c9-a0e3-4af9-a938-521737333d7a; Proxy: null)

Could you please post iam role definition to create it manually?