status code: 403 on copilot deploy

[sodhigurpreetsingh]

Hello all,

i am getting the following error on deploying my service to copilot, can someone please check and advise.

Best Regards Gurpreet

deea50e6: digest: sha256:ecefe371d7d82b7ca90f9db82d96e318cd49535ef755265d46f34f0f7a44698b size: 2844
✘ execute svc deploy: upload deploy resources for service spribe: upload custom resources for "spribe": upload custom resource "EnvControllerFunction": upload manual/scripts/custom-resources/envcontrollerfunction/3ffcf03598029891816b7ce2d1ff14fdd8079af4406a0cfeff1d4aa0109dcd7d.zip to bucket stackset-imprexis-platfo-pipelinebuiltartifactbuc-t2f8wk6kah4e: AccessDenied: User: arn:aws:sts::056619616473:assumed-role/imprexis-platform-test-EnvManagerRole/1712556949029319000 is not authorized to perform: kms:GenerateDataKey on resource: arn:aws:kms:eu-west-1:056619616473:key/77dd9eac-33c3-4e30-9f6e-ea8453e318d7 because no identity-based policy allows the kms:GenerateDataKey action
        status code: 403, request id: SS590DWAK8BKQQQG, host id: +J5m+Pq0gNLPKCSDgtzaJvijdYnHIlBCnRzwu44trMSYm1RvC35o0R7JDEu24dbKSpW57btiKg686rj/7RytKg==

[sodhigurpreetsingh]

Also please note i have full permissions on my Role

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
        }
    ]
}

I am on latest copilot and this just started happening since yesterday evening.

Can someone please kindly advise what went wrong.

Thanks

[iamhopaul123]

Hello @sodhigurpreetsingh I think your question is very similar to https://github.com/aws/copilot-cli/issues/3932. can you follow the suggestion there?