desktop icon indicating copy to clipboard operation
desktop copied to clipboard

Broke some IAM permissions?

Open DanielWFrancis opened this issue 4 years ago • 2 comments

While installing Desktop it had me approve a new cloudstack thingy and now my CircleCI jobs fail when deploying functions:

An error occurred: CustomDashresourceDashapigwDashcwDashroleLambdaFunction - AccessDenied. User doesn't have permission to call iam:GetRole.

This seems not good :(

DanielWFrancis avatar Feb 25 '21 22:02 DanielWFrancis

Hi Daniel. First off, thanks for trying out Desktop -- your feedback is greatly appreciated.

Secondly, I'm sorry about the error! I believe I see what is happening. Here's some more context: Desktop asks to create a brand new IAM role, with limited permissions. On our side, we create this role as a Provider. This is the new credential mechanism that our framework uses. It appears that this Provider was incorrectly marked as default, which means that if not specified otherwise, this credential will get used for all deployments.

I went ahead and unset the Desktop Provider as default. So, you should be good to go now.

stevewillard avatar Feb 26 '21 01:02 stevewillard

For the record, we had this happen to us too. Our serverless deployments via GitHub Actions stopped working. Debugging found the new IAM role had insufficient permissions.

Very surprised to see that beta Serverless Desktop role being used by our Production deployments!

martinhalford avatar Feb 28 '21 02:02 martinhalford