test-lambda-${env}

cron(* * * ? * *)

JSON.stringify(e)
})

error creating Route53 Hosted Zone: InvalidDomainName: Primary-06bb170 is reserved by AWS!

awsx.vpc

awsx.eks

pulumi destroy

**deleting failed**

Diagnostics:
  aws:cloudfront:Distribution (cdn):
    error: deleting urn:pulumi:website-dev::website::aws:cloudfront/distribution:Distribution::cdn: CloudFront Distribution ED…W9 cannot be deleted: PreconditionFailed: The request failed because it didn't meet the preconditions in one or more request-header fields.
    	status code: 412, request id: 9180b51d-17da-4291-9399-38784fcf2f65

false

deploymentCircuitBreaker

awsx.ecs.FargateService

All attributes must be indexed.

Turns out I was missing one : in the arn string causing the policy to render bad.  Updated the Resource below to Resource: "arn:aws:iam::" + await accountId + ":user/${aws:username}" and all is well.

${aws:username}

$

&

"*"

$

{}

export const IAMSelfManagePolicy = async () => {
const current = aws.getCallerIdentity({ async: true });
const accountId = current.then(current => current.accountId);

const IAMSelfManagePolicy = new aws.iam.Policy("IAMSelfManagePolicy", {
    name: "IAMSelfManagePolicy",
    path: "/",
    description: "Allow users to Self Manage their own credentials",
    policy: JSON.stringify({
      Version: "2012-10-17",
      Statement: [
        {
          Sid: "AllowUserToChangePersonalOptions",
            Effect: "Allow",
            Action: [
              "iam:*AccessKey*",
              "iam:*SSHPublicKey*",
              "iam:*LoginProfile",
              "iam:ChangePassword"
            ],
            Resource: "arn:aws:iam:" + await accountId + ":user/${aws:username}"
        }
      ]
    }),
  });
}

const role = new Role('role')

const myLambda = new Lambda('lambda', { executionRole: role })

const policy = new Policy('policy', {})

new RolePolicyAttachment('rpa', { role, policy })

const role = new Role('role')
const policy = new Policy('policy', {})
const rpa = new RolePolicyAttachment('rpa', { role, policy })
const myLambda = new Lambda('lambda', { executionRole: role }, { dependsOn: [rpa] })

pulumi up

awsx.ecs.Image.fromPath

import * as awsx from '@pulumi/awsx';
import * as pulumi from '@pulumi/pulumi';

const listener = new awsx.elasticloadbalancingv2.NetworkListener('example', { port: 443 });

// eslint-disable-next-line @typescript-eslint/no-unused-vars
const service = new awsx.ecs.FargateService('example', {
  taskDefinitionArgs: {
    containers: {
      example: {
        image: awsx.ecs.Image.fromPath('example', '/Source/example'),
        memory: 2048,
        portMappings: [listener],
        environment: [
          {
            name: 'ENV',
            value: 'CLOUD',
          },
        ],
      },
    },
  },
});

export const frontendURL = pulumi.interpolate`http://${listener.endpoint.hostname}/`;

getPolicyDocument()

string

Input<string>

apply()

all

string

Input<string>

aws:lambda/function:Function resource 'DEV-Lambda' has a problem: Computed attributes cannot be set: Computed attributes cannot be set, but a value was set for "vpc_config.0.vpc_id".. Examine values at 'Function.VpcConfig.VpcId'

Computed attributes cannot be set, but a value was set for "vpc_config.0.vpc_id".. Examine values at 'Function.VpcConfig.VpcId'

vpcConfig: {
    vpcId: vpc.id,
    subnetIds: vpc.publicSubnetIds,
    securityGroupIds: ['sg-a123123123'],
  }