Skip to content

IAM: Maximum policy size of 10240 bytes exceeded for role.. #18457

@automartin5000

Description

@automartin5000

What is the problem?

Our app has a lot of resources (mostly a lot of secrets). This is causing the auto-generated inline policy max combined size to be exceeded. Even though this bug is technically covered by this feature request since using Managed Policies is probably the primary fix, I thought I should formally file this issue.

Reproduction Steps

Grant a lot of permissions to a resource that exceeds a total of 10240 bytes.

What did you expect to happen?

Policy consolidation, see this feature request, or the use of managed policies enables more than 10240 of policies.

What actually happened?

CloudFormation error: Maximum policy size of 10240 bytes exceeded for role...

CDK CLI Version

2.7.0 (build cfb09d5)

Framework Version

No response

Node.js Version

16.13.1

OS

Mac OS 12.1

Language

Python

Language Version

No response

Possible solutions:

#7448
#18458

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-iamRelated to AWS Identity and Access ManagementbugThis issue is a bug.effort/mediumMedium work item – several days of effortp1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions