aws-amplify / aws-amplify/amplify-studio
AdministratorAccess-Amplify has no action route53:ListHostedZones permitted
- Dominant language
- No language data
- Stars
- 135
- Forks
- 32
- PR merge metrics
- No merged PRs in 30d
Description
### How did you install the Amplify CLI?
npm install -g @aws-amplify/cli
### If applicable, what version of Node.js are you using?
18.16.1
### Amplify CLI Version
12.1.1
### What operating system are you using?
mac os
### Did you make any manual changes to the cloud resources managed by Amplify? Please describe the changes made.
no changes made
### Describe the bug
1. run "amplify add hosting"
2. choose "Container-based hosting with AWS Fargate"
3. provide endpoint registered in Route53
4. Error:
`User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action`
### Expected behavior
"amplify add hosting" completes successfully enabling Fargate container deployments
### Reproduction steps
1. run "amplify add hosting"
2. choose "Container-based hosting with AWS Fargate"
3. provide endpoint registered in Route53
4. Error:
`User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action`
### Project Identifier
ecf6a0cf9339035613db3621d03aba8d
### Log output
```
# Put your logs below this line
2023-07-03T08:09:53.555Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileConfig(["default"])
2023-07-03T08:09:53.557Z|info : amplify-provider-awscloudformation.system-config-manager.getProfiledAwsConfig.profileConfig([{"region":"us-east-1"}])
2023-07-03T08:09:53.557Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileCredentials(["default"])
2023-07-03T08:09:54.168Z|error : User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action
UnknownNodeJSFault: User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action
```
### Additional information
_No response_
### Before submitting, please confirm:
- [X] I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.
- [X] I have removed any sensitive information from my code snippets and submission.
Contributor guide
Research direction
Start by reproducing the issue with `amplify add hosting`, selecting container-based hosting with AWS Fargate and a Route 53 endpoint. Trace the hosting workflow that requests `route53:ListHostedZones` and identify where the required permission is defined or assumed. Done means the command completes successfully for the reported setup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, node.js
- Domain
- authorization, cli, cloud
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100