search

awslabs / amazon-app-runner-deploy

Registers an AWS AppRunner Service and deploys the application using the source code of a given GitHub repository. Supports both source code and Docker image based service
MIT No Attribution
49 stars 32 forks source link

Issue while setting up AWS_ACCESS_KEY_ID & AWS_SECRET_ACCESS_KEY using copy-secret-env-vars #44

Closed pjoshi-cs closed 1 year ago

pjoshi-cs commented 1 year ago

I have a valid instance-role-arn with the necessary SSM and KMS permission. I have created 2 ssm parameters pointing to each app runner environment variable AWS_ACCESS_KEY_ID & AWS_SECRET_ACCESS_KEY respectively.

while running the git hub action pipeline it fails with UnrecognizedClientException: The security token included in the request is invalid.

But if I edit App Runner Environment values directly with the same parameter value (SSM) and update the service manually through the console - it is working.

Is there any additional setting needed?

pjoshi-cs commented 1 year ago

I figured this out. Instance role with all necessary permissions resolved this issue. In my case, it was cognito and dynamo.