aws-amplify / aws-amplify/amplify-hosting

Deleting an app without permissions doesn't show an error in the console, it fails silently

Open
#414 1 comment 0 reactions 0 assignees View on GitHub
bug console pending-prioritization
Dominant language
Dockerfile
Stars
481
Forks
123
PR merge metrics
No merged PRs in 30d

Description

**App Id**: Any app
**Region**: us-east-1

**Issue/question**
I was trying to delete an Amplify App from the console and it wouldn't get deleted. I tried it many times without understanding why it wasn't being deleted. Turned out that my IAM role policy had an explicit `Deny` for `amplify:deleteApp`. I realized that after opening the Developer console in my browser and seeing a log that said _User X does not have delete permissions on app Y due to an explicit deny_.

Showing an error in the console would have saved me some time debugging this.

**Error message**
No error was shown in the UI. Nothing would happen.

Contributor guide

Open the contributing guide

Research direction

Start with the Amplify console's app-deletion flow and reproduce the case using an IAM role with an explicit deny for amplify:deleteApp. Compare the silent UI behavior with the Developer console log; done means the console visibly reports the permission failure instead of appearing to do nothing.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
authorization, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.