Bitbucket integration with AWS CodeDeploy Roles Trust Relationship Error

Viewed 462

I am trying to deploy my sampleApplication code via AWS CodeDeploy for Bitbucket

I have used this tutorial, I have followed all the steps. Trust Relationship for role is like this

{
"Version": "2012-10-17",
"Statement": [
{
  "Effect": "Allow",
  "Principal": {
    "AWS": "arn:aws:iam::accountId:root"
  },
  "Action": "sts:AssumeRole",
  "Condition": {
    "StringEquals": {
      "sts:ExternalId": "connectionId"
    }
  }
  }
 ]
}

and while I am creating a deployment group I got error of 'can't assume role' when I select above role as Service role ARN*.

{
"Version": "2012-10-17",
"Statement": [
{
  "Effect": "Allow",
  "Principal": {
    "Service": [
      "ec2.amazonaws.com",
      "codedeploy.amazonaws.com"
    ]
  },
  "Action": "sts:AssumeRole"
 }
]
}

But when I add above trust relationship I can crete deployment group but then aws integration on bitbucket doesn't work and throw error to add sufficient permission.

1 Answers
Related