aws / aws/aws-cdk

(pipelines): ECS task execution role is not given access to the env file

Open
#15,763 8 comments 1 reaction 1 assignee Claimed by @ryparker View on GitHub
@aws-cdk/pipelines bug effort/small p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
1d 19h
Merged PRs (30d)
71

Description

I am deploying a ECS app that uses an Asset Environment File.
The ECS task is failing to start because the task execution role is not getting access to the CDK asset bucket, where the environment file is uploaded to.

Things to note:
- The deployment is cross-region, but in the same account
- There was no Asset stage when I did the initial `cdk deploy` of my pipeline - it was created by the first run of the Self Mutate stage (because the pipeline has multiple sources).

Granting access to the asset bucket explicitly (by importing it by name) solves the issue, but it is a dirty hack.

I am afraid I do not have a complete minimal example, but maybe my description would be enough.

Let me know if it is not - I will try to think of something.

### Environment

- **CDK CLI Version :** 1.115
- **Framework Version:** 1.115
- **Node.js Version:** 16.5.0
- **OS :** Linux
- **Language (Version):** all

---

This is :bug: Bug Report

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.