Skip to content

aws-cdk: bootstrapping fails due to permissions boundary name not matching the IAM conventions #26320

@przemolb

Description

@przemolb

Describe the bug

cdk bootstrap command doesn't accept IAM policy names with forward slash (/) in it.

Expected Behavior

cdk should accept IAM name with forward slashes in its name

Current Behavior

When I try to run cdk bootstrap command with permissions boundry with forward slash in its name, cdk fails:

cdk bootstrap --custom-permissions-boundary aaa/bbb
Boostrapping environment ...
Trusted accounts deployment ...
Trusted accounts for lookup ...
Using default execution policy of ...

Environment .... failed bootstrapping: Error: The permissions boundary name aaa/bbb does not match the IAM conventions.
   ...
   ...
   at sync exec4 (...node_modules/aws-cdk/lib/index.js:490:52657)

Reproduction Steps

The error and code I refer to runs on companys laptop and I cannot copy/paste full message here.

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.87.0

Framework Version

No response

Node.js Version

v18.12.1

OS

MacOS

Language

Go

Language Version

1.20.1

Other information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    @aws-cdk/aws-iamRelated to AWS Identity and Access ManagementbugThis issue is a bug.effort/smallSmall work item – less than a day of effortp1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions