Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VPC inputs doesn't work #39

Open
harleyguru opened this issue Oct 6, 2020 · 2 comments
Open

VPC inputs doesn't work #39

harleyguru opened this issue Oct 6, 2020 · 2 comments

Comments

@harleyguru
Copy link

vpcConfig:                     # (optional) lambda vpc configuration. default is null.
    securityGroupIds:            # (optional) lambda vpc security group ids.
      - xxx
      - xxx
    subnetIds:                   # (optional) lambda vpc subnet ids.
      - xxx
      - xxx

When I add this configuration, I get the following error upon the deployment:

The provided execution role does not have permissions to call CreateNetworkInterface on EC2 

This component should add required permission for Lambda.
One odd thing is that rather graphql component is doing right job for this part.

@harleyguru
Copy link
Author

The issue is that I must create IAM role for lambda execution role myself (hopefully, when we specify VPC configuration in this component, I wish it would create an appropriate role itself in background).
Also one more issue is roleArn in Readme is miss-spelled, it should be roleName.
I note this for anyone else facing this issue in the future.

@hypexr
Copy link

hypexr commented Dec 18, 2020

I've encountered this also when setting the vpcConfig. I've created the role component for it and then end up needing additions to the role, so that has just became part of my standard project layout.

It would be nice if setting the vpcConfig took care of the policies for the cases where a custom role is not required.

At minimum it should probably have an example of how to deal with this in the documentation and show information that would help the user get to the solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants