2 Respostas
- Mais recentes
- Mais votos
- Mais comentários
0
As per the documentation https://docs.aws.amazon.com/codebuild/latest/userguide/troubleshooting.html#troubleshooting-assume-role, the issue could be either STS is not active for the AWS region or CodeBuild service role associated with the build project does not exist or does not have sufficient permissions to trust CodeBuild.
respondido há um ano
0
Would it work if you modify the trusted relationship as follows?
Before
"Principal": { "Service": "codebuild.amazonaws.com" },
After
"Principal": { "AWS": "arn:aws:iam::331879450537:role/codebuild-kubernetes-eks-service-role" },
I think that the principal that call the AssumeRole operation is not codebuild, but codebuild-kubernetes-eks-service-role
.
Of course, codebuild-kubernetes-eks-service-role
must have permission to call assume role too.
respondido há um ano
Conteúdo relevante
- AWS OFICIALAtualizada há 2 anos
- AWS OFICIALAtualizada há 2 anos
- AWS OFICIALAtualizada há 2 anos