Skip to content

Instantly share code, notes, and snippets.

@asunar
Created April 16, 2021 17:49
Show Gist options
  • Save asunar/89165d67c831811d15e75c1b0845a052 to your computer and use it in GitHub Desktop.
Save asunar/89165d67c831811d15e75c1b0845a052 to your computer and use it in GitHub Desktop.
SAM Policy Template StepFunctionsExecutionPolicy generated role looks incorrect
This template.yaml file
# snip
- StepFunctionsExecutionPolicy: # Manually change to StartSyncExection after deployment
StateMachineName:
!Ref ProcessImageStateMachineExpressSync
# snip
generates this role
{
"Statement": [
{
"Action": [
"states:StartExecution"
],
"Resource": "arn:aws:states:us-west-1:xxxxxxx:stateMachine:arn:aws:states:us-west-1:xxxxxxx:stateMachine:ProcessImageStateMachineExpressSync-w4tFUSVsowaT",
"Effect": "Allow"
}
]
}
Note the duplicate arn on line 18.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment