aws-samples / aws-samples/lambda-ecs-worker-pattern

unable to access sqs queue from ecs task

未關閉
#6 4 則留言 3 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
POV-Ray SDL
星號
293
分支
46
PR 合併指標
30 天內沒有已合併 PR

描述

I'm trying to understand how this worked. When I run it i'm able to create the SQS task and launch the task but when the ECS task tries to read from the queue it gets the following error, which I have reproduced by logging into the shell script container (after preventing it from exiting):

root@f9910bdcd9d6:/# aws sqs receive-message --queue-url=https://queue.amazonaws.com/831754492748/ecs-test-plepeskaQueue --region=us-east-1

An error occurred (AccessDenied) when calling the ReceiveMessage operation: Access to the resource https://queue.amazonaws.com/ is denied.

And this makes sense b/c although I can see that the ecsInstanceRole has a policy that gives it access to the S3 bucket I can't see where it is given access to the SQS queue.

Has something changed since this worked? Or, is there another reason why access to the queue is denied?

貢獻指南

開啟貢獻指南

研究方向

從 issue 中引用的 ECS 角色設定開始,在容器內重現 aws sqs receive-message 命令。追蹤工作使用的角色,並將其權限與指定的佇列進行比較;完成標準是找出拒絕的原因,並記錄或修正範例,讓工作能夠接收訊息。

由索引模型根據 Issue 內容生成。

評估

技術堆疊
aws
領域
authorization, cloud
Issue 類型
缺陷
難度
4/5
預估耗時
3-5 天
活躍度
停滯
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。