Skip to content

Conversation

@petrkalos
Copy link
Contributor

@petrkalos petrkalos commented Aug 5, 2025

Users that are not bootstrapping the environment AWS accounts with Admin permissions will face #1839 because their bootstrap role is missing some essential CloudTrail permissions that were introduced by #1811.

⚠️ All users that are using the custom cdkExecPolicy.yaml must redownload it and then update the stack with

aws cloudformation --region asdasd create-stack --stack-name DataAllCustomCDKExecPolicyStack --template-body file://cdkExecPolicy.yaml --parameters ParameterKey=EnvironmentResourcePrefix,ParameterValue=dataall --capabilities CAPABILITY_NAMED_IAM

⚠️ Because of the policy split users must rerun cdk bootstrap in order to include the second policy into the cdk-exec role

cdk bootstrap --trust $TRUST_ACCOUNT_ID -c @aws-cdk/core:newStyleStackSynthesis=true --cloudformation-execution-policies \
arn:aws:iam::$ACCOUNT_ID:policy/DataAllCustomCDKPolicy$REGION,\
arn:aws:iam::$ACCOUNT_ID:policy/DataAllCustomCDKPolicy-1-$REGION \
aws://$ACCOUNT_ID/$REGION

Improvements

  • reflect inputs into the fields in the commands to make copy/paste/execute easier
  • split the named policies because we exceed the maximum length
  • display the commands in code-like block

Demo
Recording 2025-08-06 at 10 55 54

Feature or Bugfix

  • Bugfix

Resolve #1839

…vironmentCreateForm

* reflect inputs into the fields in the commands to make copy/paste/execute easier
* split the named policies because we exceed the maximum length
* display the commands in code-like block
Copy link
Collaborator

@TejasRGitHub TejasRGitHub left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Collaborator

@anushka-singh anushka-singh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@petrkalos petrkalos merged commit c191684 into main Aug 7, 2025
14 checks passed
@petrkalos petrkalos deleted the fix/cloudtrail_perms branch August 7, 2025 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Environment in CREATE_FAILED after deploying 2.8.0

3 participants