aws-amplify / aws-amplify/amplify-hosting
Deleting an app without permissions doesn't show an error in the console, it fails silently
- Dominant language
- Dockerfile
- Stars
- 481
- Forks
- 123
- PR merge metrics
- No merged PRs in 30d
Description
**App Id**: Any app
**Region**: us-east-1
**Issue/question**
I was trying to delete an Amplify App from the console and it wouldn't get deleted. I tried it many times without understanding why it wasn't being deleted. Turned out that my IAM role policy had an explicit `Deny` for `amplify:deleteApp`. I realized that after opening the Developer console in my browser and seeing a log that said _User X does not have delete permissions on app Y due to an explicit deny_.
Showing an error in the console would have saved me some time debugging this.
**Error message**
No error was shown in the UI. Nothing would happen.
Contributor guide
Research direction
Start with the Amplify console's app-deletion flow and reproduce the case using an IAM role with an explicit deny for amplify:deleteApp. Compare the silent UI behavior with the Developer console log; done means the console visibly reports the permission failure instead of appearing to do nothing.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- authorization, cloud
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100