AWS CodeDeploy does not have the permissions required to assume the role

user_16448182 0
Viewed 3676

I am trying to set up CI/CD with AWS + EC2 and am stuck when creating Deployment Group. The role of CodeDeploy has policies AWSCodeDeployRole and AWSCodeDeployRoleForECS but it throws an error. I tried giving it Admin rights but it is still not enough. Am I missing something? Thanks for any help!

amazon-web-services deployment continuous-integration
1 Answers

You have a role that has the permissions required for the codedeploy to perform the deployment. What you are missing here is, You should have a trust policy defined in the role that allows codedeploy to assume the role.

  1. Goto IAM console and select the role from the roles section

  2. Click Trust relationships

  3. Click Edit trust Relationships

  4. Add the following trust policy to allow code deploy service to assume this role.

     {
   "Version": "2012-10-17",
   "Statement": [
     {
       "Sid": "",
       "Effect": "Allow",
       "Principal": {
         "Service": [
           "codedeploy.amazonaws.com"
         ]
       },
       "Action": "sts:AssumeRole"
     }
   ]
 }

Reference: Create a service role for CodeDeploy

user_14486790
Related