Step Function Task stuck "In Progress" if no permission to read CodeBuild status

Question

Hello,

I am using Step Functions with the `arn:aws:states:::codebuild:startBuild.sync` task. The necessary permissions are documented [here](https://docs.aws.amazon.com/step-functions/latest/dg/codebuild-iam.html).

I noticed that there is no error and the task will remain "In Progress" when one forgets to add the `codebuild:BatchGetBuilds` and `codebuild:BatchGetReports` permissions to the step function's role. I think it would be a good idea to check if these permissions are given and to throw an error if they aren't.

Best regards,
Moritz

Answer

Hi Moritz, it is always recommended to set a timeout for your tasks in Step Functions to avoid such cases, check this link for your reference : https://docs.aws.amazon.com/step-functions/latest/dg/sfn-stuck-execution.html
And here is the list of all other best practices for your reference : https://docs.aws.amazon.com/step-functions/latest/dg/sfn-best-practices.html

Step Function Task stuck "In Progress" if no permission to read CodeBuild status

Relevant content