https://pulumi.com logo
w

worried-city-86458

09/19/2019, 2:49 AM
Copy code
aws:route53:Record (Dev-Eks-nodeInternalElbDns):
    error: Plan apply failed: AccessDenied: User: <arn> is not authorized to access this resource
        status code: 403, request id: ba3a64a7-d984-4bd7-be97-12624890e903
g

gentle-diamond-70147

09/19/2019, 2:55 AM
Are you using the correct credentials or
$AWS_PROFILE
?
w

worried-city-86458

09/19/2019, 2:56 AM
Yes. Everything works - creating eks cluster, node group, ingress, load balancer - up to trying to create a dns record for the load balancer.
g

gentle-diamond-70147

09/19/2019, 3:03 AM
You may get more information from the error running with
TF_LOG=DEBUG pulumi up --debug --logtostderr
w

worried-city-86458

09/19/2019, 3:09 AM
Thanks. That gives me the actual call that's failing: route53/GetHostedZone.
aws route53 get-hosted-zone --id <id>
fails too, so investigating further.