How to fix the aws CODE BUILD COMMAND_EXECUTION_ERROR exit status 255

Question

Iam configuring CICD piepline usng aws services code build pilepileline etc, to update the deploymnet in my ecs fargate cluster, In my buildspec.yml file aws ecs cli commands are failing throwing "COMMAND_EXECUTION_ERROR: Error while executing command: aws ecs update-service --services xxxxx. Reason: exit status 255"

I have tried providing permission to the codebuild role with "AmazonECS_FullAccess" policy.

post_build:  
    commands:  
      - echo Build completed on `date`  
      - echo Pushing the Docker images...  
      - docker push $REPOSITORY_URI:latest  
      - docker push $REPOSITORY_URI:$IMAGE_TAG  
      - echo Writing image definitions file...  
      - printf '[{"name":"xxxxxxx","imageUri":"%s"}]' $REPOSITORY_URI:$IMAGE_TAG > imagedefinitions.json  
      - cat imagedefinitions.json 
      - echo Updating ECSfargate service ...  
      - aws ecs describe-services --services xxxxxxxxxxxxxxxxx 
      - aws ecs update-service --service xxxxxxxxxxxxxxxxx --desired-count 2 --no-force-new-deployment

rc_dz · Accepted Answer · 2020-02-19 15:18:52Z

1

Attaching a policy of AmazonEC2ContainerRegistryPowerUser fixed this issue for me.

answered Feb 19, 2020 at 15:18

rc_dz

4614 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

shariqmaws · Accepted Answer · 2019-09-26 09:01:25Z

0

Error Code 255 means:

255 -- Command failed. There were errors thrown by either the CLI or by the service the request was made to.

https://docs.aws.amazon.com/cli/latest/topic/return-codes.html

As you mentioned you have provided full ECS access to CB role, next thing you can check is why the command is failing: Is it failing on ecs describe or ecs update-service? Since if the Fargate Service did not stabilize, it will result in error 255.

I would suggest to:

1) Just leave the ecs describe command and see if that works.

2) If (1) is successful, then do the ecs update-service and monitor the service in AWS ECS console and/or CW logs group if you Fargate Taskdef has a logGroup entry.

answered Sep 26, 2019 at 9:01

shariqmaws

8,9521 gold badge21 silver badges38 bronze badges

Comments

CCC · Accepted Answer · 2021-03-09 17:40:43Z

0

You'll need to grant the permission GetAuthorizationToken of your pipeline to

ecr:*

instead of to

ecr:repository/<you_repo>

because

aws ecr get-login-password --region <aws_region>

is executed against

<account_id>.dkr.ecr.<aws_region>.amazonaws.com

and not against

<account_id>.dkr.ecr.<aws_region>.amazonaws.com/repository/<your_repo>

edited Mar 9, 2021 at 17:40

answered Mar 9, 2021 at 17:35

CCC

8507 silver badges12 bronze badges

Comments

Sajjan Mishra · Accepted Answer · 2021-04-28 05:26:10Z

0

I have had the same problem as you and the way I fixed it was by following: try going to CodeBuild and then to its IAM Role. AmazonEC2ContainerRegistryFullAccess role and now click on 'Edit' for that code build and select 'Environment' and click on Allow AWS CodeBuild to modify this service role so it can be used with this building project. Now try again.

Using PrivilegedMode mode in the CodeBuild project. The mode is required when building a docker image inside a docker container.

Cheers

answered Apr 28, 2021 at 5:26

Sajjan Mishra

8510 bronze badges

Collectives™ on Stack Overflow

How to fix the aws CODE BUILD COMMAND_EXECUTION_ERROR exit status 255

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related