Skip to content

Race condition when using self managed deployment type #438

@tabrezm

Description

@tabrezm

I'm hitting a race condition when using a self managed deployment. It looks like the stack set resource starts deploying before the IAM role is ready, resulting in the following error message:

Resource handler returned message: "Resource of type 'Stack set operation [133a0012-7a7e-4ca6-a253-622c36c8d8d8] was unexpectedly stopped or failed. status reason(s): [Account <REDACTED> should have 'AWSCloudFormationStackSetExecutionRole' role with trust relationship to Role '<REDACTED>-AdminRole38563C57-xWR5IEOHv72o'.]' with identifier '<REDACTED>StackSet0EB2B840:bebe8bba-591e-4dd4-a637-1d631421d4d8' did not stabilize."

If I pre-create the admin role and specify it in the StackSet resource, it deploys successfully. Note that it does expose another minor issue, where a duplicate policy is always added to the role.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions