CodeConnections GitHub Error: "Owner with access to installation [ID] must create connection" - Documentation Gap
I'm encountering a specific error when trying to create an AWS CodeConnections connection to GitHub that doesn't seem to be documented in the official troubleshooting guides.
Error Message You don't have permission to create the connection. An owner with access to installation 85319298 must create the connection.
My Situation
- I have admin access to a specific GitHub repository
- I do NOT have GitHub organization owner permissions
- The AWS Connector for GitHub app is installed at the organization level (installation ID: 85319298)
- I'm trying to create a connection through AWS CodeConnections console Documentation Inconsistency The official AWS documentation states:
"Because a connection to a GitHub repository uses the AWS Connector for GitHub, you need organization owner permissions or admin permissions to the repository to create the connection."
**Source: Troubleshooting connections - Developer Tools console **
This suggests that repository admin permissions should be sufficient, but my experience shows otherwise.
Questions Is this error message documented anywhere? I couldn't find it in the official troubleshooting guides.
Why does the documentation say "organization owner permissions OR admin permissions to the repository" when organization-level GitHub App installations require organization owner permissions regardless of repository-level access?
Should the AWS documentation be updated to clarify the distinction between:
Repository-level GitHub App installations (where repository admin access works) Organization-level GitHub App installations (where organization owner access is required) Expected Behavior Based on the documentation, I expected to be able to create the connection with repository admin access.
Actual Behavior The system requires organization owner permissions when the GitHub App is installed at the organization level, regardless of repository-level permissions.
Workaround The only solution was to have our GitHub organization owner create the connection.
Request Could AWS please:
- Document this specific error message in the troubleshooting guides
- Clarify when organization owner vs repository admin permissions are required
- Update the documentation to distinguish between organization-level and repository-level GitHub App installations
- This would help prevent confusion for other users encountering the same issue.
- Newest
- Most votes
- Most comments
Hello.
The following documentation states that you need owner privileges to connect to a GitHub repository belonging to your organization.
This document is for CodePipeline, so it might be easy to overlook.
https://docs.aws.amazon.com/codepipeline/latest/userguide/connections-github.html
To create the connection, you must be the GitHub organization owner. For repositories that are not under an organization, you must be the repository owner.
Thank you for bringing this to our attention. You've identified an important clarification that needs to be made in the documentation.
Based on the current documentation, you're correct that it states you need "organization owner permissions or admin permissions to the repository to create the connection." However, your experience highlights a critical distinction that isn't explicitly documented: the permission requirements depend on how the AWS Connector for GitHub app is installed.
When the AWS Connector for GitHub app is installed at the organization level (as in your case with installation ID 85319298), GitHub's security model requires that only users with organization owner permissions can authorize connections through that installation. This is a GitHub platform requirement, not an AWS-specific limitation. Repository admin permissions alone are insufficient in this scenario because the app installation scope is at the organization level.
The documentation would benefit from clarifying that:
- For organization-level GitHub App installations: Organization owner permissions are required to create connections, regardless of repository-level permissions
- For repository-level GitHub App installations: Repository admin permissions are sufficient
The error message you encountered - "An owner with access to installation [ID] must create the connection" - is GitHub's way of enforcing this requirement. This specific error and its context should indeed be documented in the troubleshooting guides.
Your workaround of having the GitHub organization owner create the connection is the correct approach for organization-level installations. Once created, the connection can be used by other team members with appropriate AWS permissions.
This feedback about the documentation gap is valuable and should be addressed to prevent confusion for other users in similar situations.
Sources
Troubleshooting connections - Developer Tools console
I thing is not possible "For repository-level GitHub App installations: Repository admin permissions are sufficient"? Currently aws need github owner access to establish the connection along with installed the connection apps
Relevant content
- asked 2 years ago
- AWS OFFICIALUpdated 2 years ago
This is the valid answer