stelligent / mu

A full-stack DevOps on AWS framework
https://getmu.io
MIT License
974 stars 135 forks source link

Example fails to build in us-gov-west-1 #348

Closed cyorobert closed 6 years ago

cyorobert commented 6 years ago

Hey, thanks for the hard work developing this project. I'm following along with https://ecsworkshop.com/platform/example/ and trying to get some infrastructure up and running on us-gov-west-1.

I've created the following configuration file:

mu.yml

---

environments:
  - name: acceptance
    provider: ecs
  - name: production
    provider: ecs
service:
    acceptance:
      disabled: true
    production:
      disabled: true

but receive the following error after running mu env up acceptance && mu env up production

ERROR    mu-{my-namespace}-iam-common:  CloudFormationRole (AWS::IAM::Role) CREATE_FAILED Partition "aws" is not valid for resource "arn:aws:iam::*:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS*"

Is this an issue using Mu in govcloud, or an issue with my config?

brentley commented 6 years ago

looking at that error message, this makes me think that IAM behaves differently in govcloud than everywhere else: Partition "aws" is not valid for resource

any chance you can swap to us-west-2 for educational purposes?

cplee commented 6 years ago

All the CloudFormation templates need to be updated to replace arn:aws with arn:${AWS::Partition}

cplee commented 6 years ago

fixed in #351