Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong SSM parameter #208

Open
6 tasks
cadm-markus-brune opened this issue Jan 20, 2025 · 0 comments
Open
6 tasks

Wrong SSM parameter #208

cadm-markus-brune opened this issue Jan 20, 2025 · 0 comments
Labels
bug Something isn't working

Comments

@cadm-markus-brune
Copy link

Describe the bug
A wrong SSM parameter for the alfred_ssm usage leads to misleading error message,

e.g. in manifest file:

  • name: template1
    resource_file: templates/template1.template
    parameters:
    • parameter_key: SNSAssociationTopicArn
      parameter_value: "$[alfred_ssm_/org/sharedservice/dns/SNSAssociationTopicArn]"
      deploy_method: stack_set
      deployment_targets:
      accounts:
      • testaccount
        regions:
    • eu-central-1

and /org/sharedservice/dns/SNSAssociationTopicArn does not exist

leads to

botocore.exceptions.ClientError: An error occurred (AccessDeniedException) when calling the GetParameter operation: User: arn:aws:sts:::assumed-role/Customizations-for-ControlTo-StackSetCodeBuildRole-/AWSCodeBuild- is not authorized to perform: ssm:GetParameter on resource: arn:aws:ssm:eu-central-1::* because no identity-based policy allows the ssm:GetParameter action

To Reproduce
Specify a wrong SSM parameter as input for a stack

Expected behavior
The output of the codebuild should report, that the SSM parameter specified in the manifest file does not exist.

Please complete the following information about the solution:

  • Version: v2.7.1
  • Region: eu-central-1
  • Was the solution modified from the version published on this repository? No
  • If the answer to the previous question was yes, are the changes available on GitHub?
  • Have you checked your service quotas for the services this solution uses? Yes
  • Were there any errors in the CloudWatch Logs? No
@cadm-markus-brune cadm-markus-brune added the bug Something isn't working label Jan 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant