Skip to content

Instantly share code, notes, and snippets.

@andresgutgon
Last active June 4, 2023 20:36
Show Gist options
  • Save andresgutgon/c5f67487101c8e0909c8a48fd5cd4502 to your computer and use it in GitHub Desktop.
Save andresgutgon/c5f67487101c8e0909c8a48fd5cd4502 to your computer and use it in GitHub Desktop.
SST using aws SSO
// Running
AWS_PROFILE=<MY_USERNAME_PROFILE> pnpm sst dev
// I get this error
Errors
Site UPDATE_FAILED
stack: User: arn:aws:sts::<AWS_ACOUNT_ID>:assumed-role/AWSReservedSSO_sst-stack_<SOME_HASH>/<MY_USERNAME_PROFILE>
is not authorized to perform: cloudformation:DescribeStacks
on resource: arn:aws:cloudformation:us-east-1:<AWS_ACOUNT_ID>:stack/<MY_USERNAME_PROFILE>-local-app-Site/*
because no identity-based policy allows the cloudformation:DescribeStacks action
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"cloudformation:DescribeStackEvents",
"cloudformation:GetTemplate",
"cloudformation:DeleteStack",
"cloudformation:DescribeStackResources",
"cloudformation:ListStacks",
"cloudformation:DescribeStacks"
],
"Resource": "arn:aws:cloudformation:us-east-1:<AWS_ACOUNT_ID>:stack/*",
"Condition": {
"Null": {
"aws:ResourceTag/sst:app": "false"
}
}
},
...
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment