aws / aws/aws-cdk

(amplify-alpha): The default created role is empty

Open
#28,986 3 comments 2 reactions 0 assignees View on GitHub
@aws-cdk/aws-amplify bug effort/medium p3
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
2d 3h
Merged PRs (30d)
83

Description

### Describe the bug

When I create an amplify app, the associated role has no policies.

### Expected Behavior

If I do the same thing in the web interface it creates a role with the managed policy `AdministratorAccess-Amplify` attached

### Current Behavior

The role has no policies

### Reproduction Steps

```
const app = new amplify.App(this, 'WebApp', {
appName: 'web',
platform: amplify.Platform.WEB_COMPUTE,
sourceCodeProvider: new amplify.GitHubSourceCodeProvider({
owner,
repository,
oauthToken,
}),
});
```

### Possible Solution

I've worked around this by manually creating and passing in a role

### Additional Information/Context

_No response_

### CDK CLI Version

2.125.0

### Framework Version

_No response_

### Node.js Version

20.11.0

### OS

Linux

### Language

TypeScript

### Language Version

_No response_

### Other information

_No response_

Contributor guide

Open the contributing guide

Research direction

No source file or test is named. Start at the amplify.App construct and trace how its default role is created, then compare the generated role with the web interface behavior; done means the default role has the AdministratorAccess-Amplify managed policy attached while preserving the option to pass a custom role.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.