duo-labs / duo-labs/cloudmapper

cloudmapper auditor cdk deploy fails with multiple You are not authorized to perform this operation errors

Open
#887 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
6.3k
Forks
836
PR merge metrics
No merged PRs in 30d

Description

Hi. When trying to deploy cloudmapper auditor application to aws according to https://github.com/duo-labs/cloudmapper/blob/main/auditor/README.md the **cdk deploy** command fails with multiple _CREATE_FAILED You are not authorized to perform this operation_ error messages followed by a summary looking like this:

`CloudmapperauditorStack The following resource(s) failed to create: [alarmforwarderServiceRoleB9026B1B, taskDefinitioncloudmappercontainerLogGroup7F93E70E, CloudMapperVpcIGW7E937F7B, ClusterEB0123A7, taskDefinitionExecutionRoleA4CD45BC, taskDefinitionEventsRole377A8C74, cloudmapperalarm0DFD3BAB, LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8aServiceRole9116ECFB, taskDefinitionTaskRole3DEF31E0, CloudMapperVpcAF815FDA, CDKMetadata].`

Apparently the user which the application is being deployed with (_cloudmapper_) misses permissions/requires specific role(s) to be assigned to him.

Question: is there a list of roles the user _cloudmapper_ has to be assigned before running the cdk deploy command? I've gone through the instructions a few times, this point doesn't seem to be covered there.

Thanks in advance.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.