Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Incorrect account ids in lambda policy #23

Open
hypexr opened this issue Feb 17, 2021 · 2 comments · May be fixed by serverless/aws-sdk-extra#8
Open

Incorrect account ids in lambda policy #23

hypexr opened this issue Feb 17, 2021 · 2 comments · May be fixed by serverless/aws-sdk-extra#8

Comments

@hypexr
Copy link

hypexr commented Feb 17, 2021

graphql 3.0.3

I have graphql components configured to deploy to different stages each with a different provider defined in the serverless web ui with each provider being a different aws account.

When I deploy to the different stages the resources are created in the correct account, but about 50% of the time the account id in the lambda's role for invokeFunction is incorrect. When this happens making a graphql call returns an error that appsync is not able to call the lambda.

When the account id is incorrect it is an account id from one of the other 2 accounts.

        {
            "Effect": "Allow",
            "Action": [
                "lambda:invokeFunction"
            ],
            "Resource": "arn:aws:lambda:us-west-2:<wrong account id>:function:api-v8-stagename-appname-s2229lk*"
        }

When deploying to one account with one configured provider in the serverless UI it successfully created lambda invokeFunction policies with the correct account ids.

@hypexr hypexr changed the title Wrong account ids in lambda policy Incorrect account ids in lambda policy Feb 17, 2021
@mwawrusch
Copy link

I believe I ran into this multiple times as well.

@mwawrusch
Copy link

And customer support like this is why we leave the serverless ecosystem after being there since version 0.2 (or 0.4).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants