add error mapping for role is invalid or cannot be assumed error (#2325)

Author: rtpascual

.changeset/brown-mayflies-turn.md

@@ -0,0 +1,5 @@
+---
+'@aws-amplify/backend-deployer': patch
+---
+
+add error mapping for role is invalid or cannot be assumed error'

packages/backend-deployer/src/cdk_error_mapper.test.ts

@@ -659,6 +659,13 @@ npm error enoent`,
     errorName: 'LambdaEmptyZipFault',
     expectedDownstreamErrorMessage: undefined,
   },
+  {
+    errorMessage: `Error: some-stack failed: ValidationError: Role role-arn is invalid or cannot be assumed`,
+    expectedTopLevelErrorMessage:
+      'Role role-arn is invalid or cannot be assumed',
+    errorName: 'InvalidOrCannotAssumeRoleError',
+    expectedDownstreamErrorMessage: undefined,
+  },
 ];
 
 void describe('invokeCDKCommand', { concurrency: 1 }, () => {

packages/backend-deployer/src/cdk_error_mapper.ts

@@ -164,6 +164,16 @@ export class CdkErrorMapper {
       errorName: 'CDKNotFoundError',
       classification: 'ERROR',
     },
+    {
+      errorRegex:
+        /ValidationError: Role (?<roleArn>.*) is invalid or cannot be assumed/,
+      humanReadableErrorMessage:
+        'Role {roleArn} is invalid or cannot be assumed',
+      resolutionMessage:
+        'Ensure the role exists and AWS credentials have an IAM policy that grants sts:AssumeRole for the role',
+      errorName: 'InvalidOrCannotAssumeRoleError',
+      classification: 'ERROR',
+    },
     {
       errorRegex: new RegExp(
         `(SyntaxError|ReferenceError|TypeError)( \\[[A-Z_]+])?:((?:.|${this.multiLineEolRegex})*?at .*)`
@@ -523,6 +533,7 @@ export type CDKDeploymentError =
   | 'ExpiredTokenError'
   | 'FileConventionError'
   | 'ModuleNotFoundError'
+  | 'InvalidOrCannotAssumeRoleError'
   | 'InvalidPackageJsonError'
   | 'SecretNotSetError'
   | 'SyntaxError'