aws-samples / aws-samples/lambda-ecs-worker-pattern
unable to access sqs queue from ecs task
- 主要語言
- POV-Ray SDL
- 星號
- 293
- 分支
- 46
- PR 合併指標
- 30 天內沒有已合併 PR
描述
I'm trying to understand how this worked. When I run it i'm able to create the SQS task and launch the task but when the ECS task tries to read from the queue it gets the following error, which I have reproduced by logging into the shell script container (after preventing it from exiting):
root@f9910bdcd9d6:/# aws sqs receive-message --queue-url=https://queue.amazonaws.com/831754492748/ecs-test-plepeskaQueue --region=us-east-1
An error occurred (AccessDenied) when calling the ReceiveMessage operation: Access to the resource https://queue.amazonaws.com/ is denied.
And this makes sense b/c although I can see that the ecsInstanceRole has a policy that gives it access to the S3 bucket I can't see where it is given access to the SQS queue.
Has something changed since this worked? Or, is there another reason why access to the queue is denied?
貢獻指南
研究方向
從 issue 中引用的 ECS 角色設定開始,在容器內重現 aws sqs receive-message 命令。追蹤工作使用的角色,並將其權限與指定的佇列進行比較;完成標準是找出拒絕的原因,並記錄或修正範例,讓工作能夠接收訊息。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- aws
- 領域
- authorization, cloud
- Issue 類型
- 缺陷
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100