AWS Cloudformation create policy stuck

user_7950592 0
Viewed 234

I work with AWS CloudFormation a lot, but I cannot see why this policy creation gets stuck (every time it hangs on CREATE_IN_PROGRESS with no error message). I singled out the one component which gets stuck and tried to deploy that on its own, but it simply does not get created and I cannot see what is wrong with it. The IAM policy is an inline policy on a group with put permissions on a firehose resource, as seen below:

Resources:
  MyPolicy:
    Properties:
      Groups:
        - MyGroup
      PolicyDocument:
        Statement:
          - Action:
              - firehose:PutRecord
            Effect: Allow
            Resource:
              - arn:aws:firehose:eu-central-1:123456789:deliverystream/my-firehose
        Version: '2012-10-17'
      PolicyName: my-firehose-policy
    Type: AWS::IAM::Policy
amazon-cloudformation amazon-iam amazon-web-services
1 Answers

Accidently answered my own question. I already created a lot of inline policies, which exceeded the maximum number of characters for inline policies under a certain group. This error message was not immediately clear.

Maximum policy size of 5120 bytes exceeded for group administrator

Source

user_79505920
Related