terraform으로 pipeline 생성 후 build 오류

Question

현재 상황 CodeStar SourceConnection을 사용하여 github를 가져오고, buildspec을 활용해 빌드를 하고 s3 bucket으로 배포하는 pipeline을 만들 생각입니다. 오류 내용빌드로그 [Container] 2023/03/16 07:00:00 Waiting for agent ping [Container] 2023/03/16 07:00:01 Waiting for DOWNLOAD_SOURCE authorization failed for primary source and source versionDOWNLOAD_SOURCE 실패함 CLIENT_ERROR: authorization failed for primary source and source version권한 부족 문제로 보이는데 어떤 권한이 부족한 지 모르겠습니다.일단 사용자 iam에는 아래와 같은 정책들을 연결해 놓은 상태입니다. AdministratorAccess AmazonS3FullAccess AWSCloudFormationFullAccess AWSCodeBuildAdminAccess AWSCodePipeline_FullAccess AWSCodeStarFullAccess CloudWatchLogsFullAccess IAMFullAccess ResourceGroupsandTagEditorFullAccess그리고 테라폼 코드에서 연결한 정책들은 아래에 있습니다.resource &#34;aws_iam_role&#34; &#34;codebuild_role&#34; {name &#61; &#34;terraform-codebuild&#34;assume_role_policy &#61; <<EOF{&#34;Version&#34;: &#34;2012-10-17&#34;,&#34;Statement&#34;: [{&#34;Effect&#34;: &#34;Allow&#34;,&#34;Principal&#34;: {&#34;Service&#34;: &#34;codebuild.amazonaws.com&#34;},&#34;Action&#34;: &#34;sts:AssumeRole&#34;}]}EOF}resource &#34;aws_iam_policy&#34; &#34;codebuild_policy&#34; {description &#61; &#34;CodeBuild Execution Policy&#34;policy &#61; <<EOF{&#34;Version&#34;: &#34;2012-10-17&#34;,&#34;Statement&#34;: [{&#34;Action&#34;: [&#34;logs:CreateLogGroup&#34;, &#34;logs:CreateLogStream&#34;, &#34;logs:PutLogEvents&#34;],&#34;Effect&#34;: &#34;Allow&#34;,&#34;Resource&#34;: &#34;*&#34;},{&#34;Action&#34;: [&#34;s3:GetObject&#34;, &#34;s3:GetObjectVersion&#34;, &#34;s3:PutObject&#34;, &#34;s3:GetBucketAcl&#34;, &#34;s3:GetBucketLocation&#34;, &#34;codestar-connections:UseConnection&#34;],&#34;Effect&#34;: &#34;Allow&#34;,&#34;Resource&#34;: &#34;${aws_s3_bucket.artifact_bucket.arn}/*&#34;},{&#34;Effect&#34;: &#34;Allow&#34;,&#34;Action&#34;: [&#34;codebuild:CreateReportGroup&#34;,&#34;codebuild:CreateReport&#34;,&#34;codebuild:UpdateReport&#34;,&#34;codebuild:BatchPutTestCases&#34;,&#34;codebuild:BatchPutCodeCoverages&#34;],&#34;Resource&#34;: &#34;*&#34;},{&#34;Effect&#34;: &#34;Allow&#34;,&#34;Action&#34;: [&#34;codestar-connections:CreateConnection&#34;,&#34;codestar-connections:GetConnection&#34;,&#34;codestar-connections:DeleteConnection&#34;,&#34;codestar-connections:ListConnections&#34;],&#34;Resource&#34;: &#34;*&#34;}]}EOF}resource &#34;aws_iam_role_policy_attachment&#34; &#34;codebuild-attach&#34; {role &#61; aws_iam_role.codebuild_role.namepolicy_arn &#61; aws_iam_policy.codebuild_policy.arn}resource &#34;aws_iam_role&#34; &#34;codepipeline_role&#34; {name &#61; &#34;terraform-codepipeline&#34;assume_role_policy &#61; <<EOF{&#34;Version&#34;: &#34;2012-10-17&#34;,&#34;Statement&#34;: [{&#34;Action&#34;: &#34;sts:AssumeRole&#34;,&#34;Principal&#34;: {&#34;Service&#34;: &#34;codepipeline.amazonaws.com&#34;},&#34;Effect&#34;: &#34;Allow&#34;}]}EOF}

terraform으로 pipeline 생성 후 build 오류

0개의 답변

#terraform 목록