Skip to content

(aws-rds): Cannot add both export and import bucket policies to rds cluster #16757

@jfrconley

Description

@jfrconley

I am trying to add both import and export bucket policies to my RDS cluster. Everything compiles and builds correctly, but when I deploy I get the following error message:

The ed1tokkl9qk0il4 DB instance is not available to manage the arn:aws:iam::***********:role/*******-databaserdsinstanceS3ImportRole91666B-QS8UMWLG99XI IAM role for the feature na
me s3Export feature. Wait for a moment and try again. (Service: AmazonRDS; Status Code: 400; Error Code: InvalidDBInstanceState; Request ID: 2a40ab50-d63e-450c-aad9-472d6d100a53; Proxy:
null)

It seems like it's trying to add both roles at once and the second one is failing.

Reproduction Steps

Create any RDS instance and add both an import and export bucket policy.

db = new DatabaseInstance(this, 'rds-instance', {
        engine: DatabaseInstanceEngine.postgres({
          version: PostgresEngineVersion.VER_11_12,
        }),
        vpc: dbVpc,
        multiAz: false,
        instanceType: InstanceType.of(InstanceClass.T3, InstanceSize.MICRO),
        publiclyAccessible: true,
        vpcSubnets: {
          subnetType: SubnetType.PUBLIC,
        },
        credentials: dbCredentials,
        s3ExportBuckets: [dataExportBucket],
        s3ImportBuckets: [dataImportBucket],
        iamAuthentication: true,
      });

What did you expect to happen?

Both policies should be added

What actually happened?

Stack deploy fails and rollsback with neither added.

Environment

  • CDK CLI Version : 1.25.0
  • Framework Version: 1.25.0
  • Node.js Version: 14.16.0
  • OS : Regolith Linux (Ubuntu Base)
  • Language (Version): TS 4.4.3

This is 🐛 Bug Report

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-rdsRelated to Amazon Relational DatabasebugThis issue is a bug.effort/smallSmall work item – less than a day of effortin-progressThis issue is being actively worked on.p1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions