https://pulumi.com logo
Powered by
Title
c

curved-ice-93356

10/13/2022, 10:58 AM
Hey guys , I am using pulumi service as a backend in my gitlab CI/CD pipeline. I can see resources on pulumi website and but on aws console they not appearing. please help if you have any idea.
q

quaint-eye-38036

10/13/2022, 11:12 AM
Is pulumi using your credentials to create resources in AWS?
It's possible that pulumi is using a different one compared to the one you used to sign in to the console. So, your credentials don't sufficient permissions to use S3
c

curved-ice-93356

10/13/2022, 11:12 AM
it uses a accesskeyID and accessSecret that I created which is more like a user
q

quaint-eye-38036

10/13/2022, 11:14 AM
Are the IAM policies the same?
c

curved-ice-93356

10/13/2022, 11:14 AM
yes we both administrators
q

quaint-eye-38036

10/13/2022, 11:17 AM
Does both the users have a policy have the action 
S3: ListAction
? It's a good idea to review the permissions for S3
c

curved-ice-93356

10/13/2022, 11:18 AM
The policy basically looks like this 
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}
h

hallowed-horse-57635

10/13/2022, 2:25 PM
so the bucket is showing up but you don't have access to the files in it?
c

curved-ice-93356

10/13/2022, 2:26 PM
it does not show up. I can't see any resources that is listed in pulumi
h

hallowed-horse-57635

10/13/2022, 2:28 PM
is the screen shot you shared form the same issue ?
c

curved-ice-93356

10/13/2022, 3:03 PM
yes it is
h

hallowed-horse-57635

10/13/2022, 3:05 PM
i guess i am confused. the screen shot shows you don't have permissions error on a file in a bucket that's visible. but you are suggesting yo don't see any thing...
c

curved-ice-93356

10/13/2022, 3:05 PM
basically my aws console is showing no resources but these resources exist . I can verify because our staging environment that uses cloudfront is up
so I was able to get to that page by going to Pulumi and click "View on aws" it took me straight to the screenshot.
h

hallowed-horse-57635

10/13/2022, 10:33 PM
it doesnt make sense. any ways, i would get the AWS account number from the URN in Pulumi and make sure when you are logging in on AWS console, you are using the same account....
#generalJoin Slack
Powered by