Can't deploy Lambda Function in AWS

Question

I am trying to execute serverless deploy command to deploy my lambda function.But it is showing

user is not authorized to perform: cloudformation:UpdateStack on resource: arn:aws:cloudformation:ap-south-1

What policy should be attached to deploy lambda function?

cerberus · Accepted Answer · 2018-04-23 17:09:55Z

1

AWS user you are using for deploying serverless template should have updateStack permission for cloudformation.

{ "Effect":"Allow", "Action": "cloudformation:UpdateStack", "Resource":"*" }

Use policy simulator to check if user has required permissions.

answered Apr 23, 2018 at 17:09

cerberus

5615 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dnyanesh Over a year ago

Can you please tell me how to set permission in details

cerberus Over a year ago

@Dnyanesh Create a new policy in IAM with { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "cloudformation:*", "Resource": "*" } ] }. This provides full permission to cloudformation. Add this policy to the user you are using to deploy.

Logemann · Accepted Answer · 2018-04-24 14:06:51Z

0

I simply created a user called "serverless-admin" with only "Programmatic Access" and attached the policy "AdministratorAccess". I DIDNT check the "AWS Management Console Access" feature. Then simply write down the "Key" and the "secret" and use that for configuring serverless aka aws client.

This way you can be sure that everything serverless does when it comes to deploying your stack is allowed. Perhaps you can do it more strict but this way you dont run into any issues.

answered Apr 24, 2018 at 14:06

Logemann

2,98340 silver badges56 bronze badges

1 Comment

Alastair McCormack Over a year ago

I would recommend against creating a deploy user with full admin privileges, especially if you're going to store the key and secret somewhere. Either deploy as you using your current profile or create a deploy user with only the access it requires.

Collectives™ on Stack Overflow

Can't deploy Lambda Function in AWS

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related