aws-amplify / aws-amplify/docs

Unclear permissions requirement to create new app

Open
#8,335 0 comments 0 reactions 0 assignees View on GitHub
amplify/hosting
Dominant language
MDX
Stars
506
Forks
1.1k
Avg merge
3h 14m
Merged PRs (30d)
1

Description

**Describe the content issue**:

The [Configure AWS for local development](https://docs.amplify.aws/angular/start/account-setup/) page recommends using IAM Identity Center so I created 2 users one for the admin and another for a developer.

I created an user called `amplify-admin` and a permission set called `amplify-admin-policy` to which I attached the `AdministratorAccess-Amplify` policy. I assigned `amplify-admin` and `amplify-admin-policy` to an AWS account called `dev-aws-account` which has `AdministratorAccess` permission.

When I signed in as `dev-aws-account`, I successfully created the sample app, built and deployed it.

When I signed in as `amplify-admin` and select `amplify-admin-policy`. I have permission to `Create new app` (`AdministratorAccess-Amplify`) but I don't have permission to Bootstrap, I think the required policy to Bootstrap is `AdministratorAccess`.

![Image](https://github.com/user-attachments/assets/f18e8d85-e814-420c-a8b6-bf06f31240a3)

![Image](https://github.com/user-attachments/assets/50789e95-b187-42d2-94d1-355f55e69589)

In the documentation:

![Image](https://github.com/user-attachments/assets/8ea32501-427d-490f-9394-b67758f2f90c)

When I clicked that button, it redirected me to `amplify-admin` and because this account doesn't have `AdministratorAccess`, it only has `AdministratorAccess-Amplify`, I stuck at Bootstrap error as shown above.

The documentation should be clear on the permission needed to create a new app, it seems that only user with `AdministratorAccess` can create a new app?

How do I fix the Bootstrap issue when I login as `amplify-admin`? I know I can attach `AdministratorAccess` policy to `amplify-admin-policy` but that defeats the purpose of why I limit `amplify-admin` user to only has `AdministratorAccess-Amplify` permissions in the first place.

**URL page where content issue is**: https://docs.amplify.aws/angular/start/quickstart/

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.