(core): file asset publishing role is not used while performing cdk diff with larger templates #29936
Labels
@aws-cdk/core
Related to core CDK functionality
bug
This issue is a bug.
effort/medium
Medium work item – several days of effort
p2
Describe the bug
cdk diff
is not using file asset publish role when uploading larger templates to S3 while creating the change set. It is using the user/role that is configured in the CLI. If the user/role (configured in CLI) lacks permissions then AccessDenied error is thrown and fallback to template differences.Expected Behavior
File asset publish role to be used to upload templates for cdk diff
Current Behavior
fail: Access Denied
Failed to publish one or more assets. See the error messages above for more information.
Reproduction Steps
Create IAM user or role with deny all S3 actions.
Configure your CLI with the above role/user.
Create a CDK project with one SQS queue
Deploy
Add more resources that will create a larger template to the stack and execute
cdk diff -v
Stack trace -
The IAM user configured in my CLI does not have S3 permissions.
Possible Solution
No response
Additional Information/Context
No response
CDK CLI Version
2.138.0
Framework Version
No response
Node.js Version
20.10
OS
macos
Language
TypeScript
Language Version
No response
Other information
No response
The text was updated successfully, but these errors were encountered: