AppRunner service fails to update with new ECR access role

Question

I have an App Runner service that was created successfully, but fails to update if I change the ECR access role. Nothing about the role changed other than the name.

It takes 40min for the update to eventually fail, and the only error messages I receive are:

```
06-27-2022 03:50:43 PM [AppRunner] Service status is set to RUNNING.
06-27-2022 03:50:42 PM [AppRunner] Service update failed. For details, see service logs.
06-27-2022 03:11:04 PM [AppRunner] Service status is set to OPERATION_IN_PROGRESS.
06-27-2022 03:11:04 PM [AppRunner] Service update started.
```

Is this a known issue?

Accepted Answer

Hello Russ,

Greetings for the day!

I see that changing the ECR Access Role in the AWS AppRunner service is causing the service update to fail. The list of known issues with AWS AppRunner can tracked on the AppRunner Roadmap - https://github.com/aws/apprunner-roadmap/issues?q=is%3Aissue+is%3Aopen

I was not able to find any issue related to the change in ECR Access Role leading to the failure in service update but I am able to replicate the issue in my test account as well.

I have logged the issue in the service Roadmap and the concerned team will take the necessary action on it. You can follow the issue here - https://github.com/aws/apprunner-roadmap/issues/142

If you want to add any other information related to the issue, please feel free to add it over the github issue.

Regards,
Gurpreet S.

AppRunner service fails to update with new ECR access role

Relevant content