Name

aws:ecs:Service (backend):
  error: unable to discover AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration

aws.secretsmanager.getSecret()

aws.secretsmanager.getSecretVersion()

error: Error: Invoke of 'aws:secretsmanager/getSecretVersion:getSecretVersion' failed: Missing required argument: The argument "secret_id" is required, but no definition was found. ()
    at deserializeResponse (./node_modules/@pulumi/runtime/invoke.ts:227:15)
    at ./node_modules/@pulumi/runtime/invoke.ts:169:16
    at Generator.next (<anonymous>)
    at fulfilled (./node_modules/@pulumi/pulumi/runtime/invoke.js:18:58)
    at processTicksAndRejections (node:internal/process/task_queues:96:5)

secret_id

secretId

const credentials = aws.secretsmanager.getSecretVersion({
  secretId: mySecret.id,
})

pulumi up

kubeletExtraArgs

return new eks.Cluster(
  getClusterName(),
  {
    name: getClusterName(),
    vpcId: vpc.id,
    publicSubnetIds: vpc.publicSubnetIds,
    privateSubnetIds: vpc.privateSubnetIds,
    nodeAssociatePublicIpAddress: false,
    instanceType: 'c5.xlarge',
    nodeRootVolumeSize: 50,
    desiredCapacity: 3,
    minSize: 2,
    maxSize: 8,

AttributeError: 'ServiceStatus' object has no attribute 'loadBalancer'

cluster.clusterSecurityGroup

cluster.nodeSecurityGroup

expected runtime to be one of [nodejs nodejs4.3 nodejs6.10 nodejs8.10 nodejs10.x nodejs12.x nodejs14.x java8 java8.al2 java11 python2.7 python3.6 python3.7 python3.8 python3.9 dotnetcore1.0 dotnetcore2.0 dotnetcore2.1 dotnetcore3.1 nodejs4.3-edge go1.x ruby2.5 ruby2.7 provided provided.al2]

awsProvider, err := aws.NewProvider(ctx, "aws-provider", &aws.ProviderArgs{
		AssumeRole: &aws.ProviderAssumeRoleArgs{
			RoleArn:     awsAssumeRoleArn,
			SessionName: pulumi.Sprintf("%s-tenant-%s", awsAssumeRoleSessionName, tenant.name),
		},
		SkipMetadataApiCheck: pulumi.Bool(false),
	})

error: an unhandled error occurred: 1 error occurred:
    	* rpc error: code = Unknown desc = invocation of aws:index/getCallerIdentity:getCallerIdentity returned an error: 1 error occurred:
    	* error configuring Terraform AWS Provider: IAM Role (arn:aws:iam::xxxxxxx:role/CI) cannot be assumed.
    
    There are a number of possible causes of this - the most common are:
      * The credentials used in order to assume the role are invalid
      * The credentials do not have appropriate permission to assume the role
      * The role ARN is not valid
    
    Error: NoCredentialProviders: no valid providers in chain. Deprecated.
    	For verbose messaging see aws.Config.CredentialsChainVerboseErrors

> aws sts assume-role --role-arn arn:aws:iam::xxxxxxx:role/CI --role-session-name abcd-xvy-asdjh-adfdfsdfsdfdfdfAda-sdfhsfbhbdfjsdjjajdadasdsadada-asdhajdhjashdjhajfhjahf

An error occurred (ValidationError) when calling the AssumeRole operation: 1 validation error detected: Value 'abcd-xvy-asdjh-adfdfsdfsdfdfdfAda-sdfhsfbhbdfjsdjjajdadasdsadada-asdhajdhjashdjhajfhjahf' at 'roleSessionName' failed to satisfy constraint: Member must have length less than or equal to 64

const gitRunnerAllowFile = new pulumi.asset.StringAsset("file.json");

error: aws:iam/rolePolicy:RolePolicy resource 'Gitrunner-Allow-Access' has a problem: "policy" contains an invalid JSON policy. Examine values at 'RolePolicy.Policy'.

aws:lambda/function:Function resource ’name-of-lambda has a problem: expected runtime to be one of [nodejs nodejs4.3 nodejs6.10 nodejs8.10 nodejs10.x nodejs12.x nodejs14.x java8 java8.al2 java11 python2.7 python3.6 python3.7 python3.8 python3.9 dotnetcore1.0 dotnetcore2.0 dotnetcore2.1 dotnetcore3.1 nodejs4.3-edge go1.x ruby2.5 ruby2.7 provided provided.al2], got dotnet6. Examine values at ‘Function.Runtime’.

export declare const Runtime: {
  readonly DotnetCore2d1: “dotnetcore2.1”;
  readonly DotnetCore3d1: “dotnetcore3.1";
  readonly Dotnet6: “dotnet6”;            <————— HERE
  readonly Go1dx: “go1.x”;
  readonly Java8: “java8”;
  readonly Java8AL2: “java8.al2";
  readonly Java11: “java11”;
  readonly Ruby2d5: “ruby2.5";
  readonly Ruby2d7: “ruby2.7”;
  readonly NodeJS10dX: “nodejs10.x”;
  readonly NodeJS12dX: “nodejs12.x”;
  readonly NodeJS14dX: “nodejs14.x”;
  readonly Python2d7: “python2.7”;
  readonly Python3d6: “python3.6";
  readonly Python3d7: “python3.7”;
  readonly Python3d8: “python3.8";
  readonly Custom: “provided”;
  readonly CustomAL2: “provided.al2";
};

In the middle of building stack the provider assumes a different role ( or provider is switched to different account, Eg: below code

provider = Provider(
        resource_name="different_account",
        region="eu-west-1",
        assume_role=ProviderAssumeRoleArgs(role_arn=role_arn),
    )
 BucketObject( resource_name=f"{name}-glue-job-script",
            opts=ResourceOptions(depends_on=[self._rolePolicy], provider=provider),
            bucket=destination_bucket.name,
            key=f"glue-job-scripts/{glue_script.split('/')[-1]}",
            source=FileAsset(glue_script))
Fails while doing above operation and following error occurs - Access denied error

aws:s3:BucketObject test-ab40dc-glue-job-script creating failed '
'Diagnostics:'
Error uploading object to S3 bucket (test-ab40dc-curated): '
'AccessDenied: Access Denied'

awsx.ec2.Vpc.fromExistingIds()

const vpc = awsx.ec2.Vpc.fromExistingIds("vpcFromId", {
        vpcId: configData.vpcId,
    },{provider: provider})

error: Error: invocation of aws:ec2/getVpc:getVpc returned an error: invoking aws:ec2/getVpc:getVpc: 1 error occurred:
        * no matching EC2 VPC found

CallbackFunction

eks.createManagedNodeGroup()

launchTemplate: {
  id: pulumi.interpolate`${myLaunchTemplate.id}`,
  version: "1",
},

* error reading CodePipeline: ValidationException: 1 validation error detected: Value at 'name' failed to satisfy constraint: Member must satisfy regular expression pattern: [A-Za-z0-9.@\-_]+

pulumi.Config("aws").require("region")

const region = new pulumi.Config("aws").require('region');

const codepipelinesProvider = new aws.Provider("codepipelinesProvider", {
  profile: CODEPIPELINES_PROFILE_ID,
  region: region,
});

Type string is not assignable to Type Input

aws:ecs/taskDefinition:TaskDefinition: (replace)

aws:ecs/service:Service: (update)

arn:aws:iam::111111111:user/pulumi-dev is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::111111111:user/pulumi-dev

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::076477451822:user/pulumi-dev"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}