GlobalTableCheckerRole Policy Document causing cfn-template to fail

aws-solutions / cognito-user-profiles-export-reference-architecture

A reference architecture for exporting user profiles, group details, and group memberships from an Amazon Cognito User Pool to an Amazon DynamoDB global table using AWS Step Functions and AWS Lambda.

https://aws.amazon.com/solutions/implementations/cognito-user-profiles-export-reference-architecture/

Apache License 2.0

52 stars 19 forks source link

GlobalTableCheckerRole Policy Document causing cfn-template to fail #2

Closed gmedard closed 3 years ago

gmedard commented 3 years ago

Tried the One-Click deployment on the AWS-Solutions site using the default region (us-east-1) and I'm receiving the following error:

The policy failed legacy parsing (Service: AmazonIdentityManagement; Status Code: 400; Error Code: MalformedPolicyDocument; Request ID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx; Proxy: null)
The following resource(s) failed to create: [GlobalTableCheckerRole]. Rollback requested by user.

ericquinones commented 3 years ago

Hi @gmedard -

Thanks for raising this. I was able to reproduce this by using an invalid value as the Secondary Region when deploying the stack. For instance, I used us-west--2. Can you please try again and see if maybe there was a typo you used when setting that parameter?

We'll also look into tightening the regex that validates that parameter.

gmedard commented 3 years ago

Thanks @ericquinones - There was an extra character being copied when I was pasting. That fixed that issue.