[Bug]: Lack of permissions on lab "Application Metrics in Amazon CloudWatch"

[henriquesantanati]

Installation method

Workshop Studio

What happened?

While following the steps for Container Insights on EKS on build ID 9886a22, I've seen the following error on Dashboard Order-Service-Metrics-1:

There was an error while trying to get graph data: User: arn:aws:sts::ACCOUNT_ID:assumed-role/WSParticipantRole/Participant is not authorized to perform: cloudwatch:GetMetricData with an explicit deny in an identity-based policy

What did you expect to happen?

It should show the dashboard like the below:

How can we reproduce it?

I was able to reproduce it but I've seen 2 folks seeing the dashboard without issues. Unsure what happened.
It looks like an intermittent issue.

Anything else we need to know?

I also checked the IAM permissions and the role has Admin permissions. The Deny policy is not mentioning anything about that specific API and it is also filtering the region that I'm using eu-west-1

EKS version

v1.29