Regarding deploying the stack using AWS CDK

Question

I tried deploying the Cloud Formation stack from the AWS CDK but at step 108 of 112. I got this error "Stack deploy failed (the stack disappeared while we were deploying it): Received response status [FAILED] from custom resource. Message returned: AccessDeniedException: Resource is not in the state functionActive"

I added the necessary permissions (Lambda full access) to the CDK execute role and deploy role. But again getting this same error.

Please help

I added the necessary permissions (Lambda full access) to the CDK execute role and deploy role. But again getting this same error.

Please help

Answer

Could be related to this issue, assuming you have the right permissions in place: https://github.com/aws/aws-cdk/issues/26838

Answer

Hello.

How about searching for the API where the error occurred from the CloudTrail event history as described in the document below?  
This may reveal the missing IAM policy.  
https://repost.aws/knowledge-center/cloudformation-internal-failure-error

You can check the CloudTrail event history by following the steps in the document below.  
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html

Answer

Hi Yatin,

The *"AccessDeniedException: Resource is not in the state functionActive"* error suggests a problem with the state of a Lambda function in your CloudFormation stack deployed via AWS CDK.

Ensure all Lambda functions are in the "Active" state and check for any dependencies or configurations in your CDK code that might prevent this. Also, verify the IAM permissions for the roles used by CDK for deployment. Consider checking CloudWatch Logs for more insights and ensuring your AWS CDK is up-to-date. If issues persist, testing the deployment manually.

Regarding deploying the stack using AWS CDK

Relevant content