From 88f6c63846c12bf9f3fbbe31a75cb9c6aa88938c Mon Sep 17 00:00:00 2001 From: Leon Luttenberger Date: Tue, 9 Aug 2022 09:58:39 -0500 Subject: [PATCH] Updating CONTRIBUTING.md and CONTRIBUTING_COMMON_ERRORS.md --- CONTRIBUTING.md | 6 +++--- CONTRIBUTING_COMMON_ERRORS.md | 21 ++++++++++++++++++++- 2 files changed, 23 insertions(+), 4 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 86ae6c08c..49d962cbe 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -246,11 +246,11 @@ or * To run a specific test function: -``pytest tests/test_db.py::test_sql`` +``pytest tests/test_mysql.py::test_read_sql_query_simple`` -* To run all database test functions (Using 8 parallel processes): +* To run all database test functions for MySQL (Using 8 parallel processes): -``pytest -n 8 tests/test_db.py`` +``pytest -n 8 tests/test_mysql.py`` * To run all data lake test functions for all python versions (Only if Amazon QuickSight is activated and Amazon OpenSearch template is deployed): diff --git a/CONTRIBUTING_COMMON_ERRORS.md b/CONTRIBUTING_COMMON_ERRORS.md index f8b90fec4..86761a04e 100644 --- a/CONTRIBUTING_COMMON_ERRORS.md +++ b/CONTRIBUTING_COMMON_ERRORS.md @@ -110,4 +110,23 @@ https://stackoverflow.com/questions/54302793/dyld-library-not-loaded-usr-local-o brew install unixodbc ``` ------ \ No newline at end of file +----- + +## CloudFormation Deployment + +### Error Message + +During the deployment of `aws-data-wrangler-databases`, the creation of the resource `CodeBuildTestRoleLFPermissions` fails with + +``` +Resource does not exist or requester is not authorized to access requested permissions. (Service: AWSLakeFormation; Status Code: 400; Error Code: AccessDeniedException; Request ID: 14a26718-ee4e-49f2-a7ca-d308e49485f8; Proxy: null) +``` + +### Solution + +The IAM role used to deploy the CloudForation stack does not have permissions to assign permissions in AWS Lake Formation. The quickest solution is to find the IAM role and set it as an admin in Lake Formation. + +In order to find the role: +1. Navigate to the CloudFormation console in your account +1. Select the `aws-data-wrangler-databases` stack which failed to deploy +1. Under the "Stack info" tab, find the value for "IAM role". The name of the role should be in the following format: `arn:aws:iam::{ACCOUNT_ID}:role/cdk-{UUID}-cfn-exec-role-{ACCOUNT_ID}-{REGION}`