aws-amplify / aws-amplify/amplify-studio

AdministratorAccess-Amplify has no action route53:ListHostedZones permitted

Open
#986 3 comments 0 reactions 0 assignees View on GitHub
feature-request iam-policy
Dominant language
No language data
Stars
135
Forks
32
PR merge metrics
No merged PRs in 30d

Description

### How did you install the Amplify CLI?

npm install -g @aws-amplify/cli

### If applicable, what version of Node.js are you using?

18.16.1

### Amplify CLI Version

12.1.1

### What operating system are you using?

mac os

### Did you make any manual changes to the cloud resources managed by Amplify? Please describe the changes made.

no changes made

### Describe the bug

1. run "amplify add hosting"
2. choose "Container-based hosting with AWS Fargate"
3. provide endpoint registered in Route53
4. Error:
`User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action`

### Expected behavior

"amplify add hosting" completes successfully enabling Fargate container deployments

### Reproduction steps

1. run "amplify add hosting"
2. choose "Container-based hosting with AWS Fargate"
3. provide endpoint registered in Route53
4. Error:
`User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action`

### Project Identifier

ecf6a0cf9339035613db3621d03aba8d

### Log output

```
# Put your logs below this line
2023-07-03T08:09:53.555Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileConfig(["default"])
2023-07-03T08:09:53.557Z|info : amplify-provider-awscloudformation.system-config-manager.getProfiledAwsConfig.profileConfig([{"region":"us-east-1"}])
2023-07-03T08:09:53.557Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileCredentials(["default"])
2023-07-03T08:09:54.168Z|error : User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action
UnknownNodeJSFault: User: arn:aws:iam::345887413548:user/amplify-user is not authorized to perform: route53:ListHostedZones because no identity-based policy allows the route53:ListHostedZones action

```

### Additional information

_No response_

### Before submitting, please confirm:

- [X] I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.
- [X] I have removed any sensitive information from my code snippets and submission.

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the issue with `amplify add hosting`, selecting container-based hosting with AWS Fargate and a Route 53 endpoint. Trace the hosting workflow that requests `route53:ListHostedZones` and identify where the required permission is defined or assumed. Done means the command completes successfully for the reported setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, node.js
Domain
authorization, cli, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.