-
Notifications
You must be signed in to change notification settings - Fork 4.4k
(aws-rds): Cannot add both export and import bucket policies to rds cluster #16757
Copy link
Copy link
Closed
Closed
Copy link
Labels
@aws-cdk/aws-rdsRelated to Amazon Relational DatabaseRelated to Amazon Relational DatabasebugThis issue is a bug.This issue is a bug.effort/smallSmall work item – less than a day of effortSmall work item – less than a day of effortin-progressThis issue is being actively worked on.This issue is being actively worked on.p1
Description
I am trying to add both import and export bucket policies to my RDS cluster. Everything compiles and builds correctly, but when I deploy I get the following error message:
The ed1tokkl9qk0il4 DB instance is not available to manage the arn:aws:iam::***********:role/*******-databaserdsinstanceS3ImportRole91666B-QS8UMWLG99XI IAM role for the feature na
me s3Export feature. Wait for a moment and try again. (Service: AmazonRDS; Status Code: 400; Error Code: InvalidDBInstanceState; Request ID: 2a40ab50-d63e-450c-aad9-472d6d100a53; Proxy:
null)
It seems like it's trying to add both roles at once and the second one is failing.
Reproduction Steps
Create any RDS instance and add both an import and export bucket policy.
db = new DatabaseInstance(this, 'rds-instance', {
engine: DatabaseInstanceEngine.postgres({
version: PostgresEngineVersion.VER_11_12,
}),
vpc: dbVpc,
multiAz: false,
instanceType: InstanceType.of(InstanceClass.T3, InstanceSize.MICRO),
publiclyAccessible: true,
vpcSubnets: {
subnetType: SubnetType.PUBLIC,
},
credentials: dbCredentials,
s3ExportBuckets: [dataExportBucket],
s3ImportBuckets: [dataImportBucket],
iamAuthentication: true,
});What did you expect to happen?
Both policies should be added
What actually happened?
Stack deploy fails and rollsback with neither added.
Environment
- CDK CLI Version : 1.25.0
- Framework Version: 1.25.0
- Node.js Version: 14.16.0
- OS : Regolith Linux (Ubuntu Base)
- Language (Version): TS 4.4.3
This is 🐛 Bug Report
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
@aws-cdk/aws-rdsRelated to Amazon Relational DatabaseRelated to Amazon Relational DatabasebugThis issue is a bug.This issue is a bug.effort/smallSmall work item – less than a day of effortSmall work item – less than a day of effortin-progressThis issue is being actively worked on.This issue is being actively worked on.p1