AppStagingSynthesizer: Execution role misses ECR access
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 74
Description
### Describe the bug
Using AppStagingSynthesizer lambda execution roles miss access to ECR. In this way Lambdas fail after a while with "The function does not have permission to access the specified image."
### Expected Behavior
Access to ECR, so that images can be pulled to Lambda.
### Current Behavior
No access to ECR
### Reproduction Steps
Deploy a lambda, wait.
### CDK CLI Version
2.94.0 (build 987c329)
### Node.js Version
v18.17.1
### OS
Mac OS
### Language
Typescript
Contributor guide
Research direction
Start by locating AppStagingSynthesizer's Lambda execution-role generation and inspect the deployed role policy for container-image access. Reproduce the issue by deploying a Lambda and waiting for the reported image-permission failure; done means the generated execution role permits the Lambda image to be pulled from ECR.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud, infrastructure
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100