Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"rrcreate" command not considering the --role-arn option #316

Open
hojothum opened this issue Jun 3, 2021 · 0 comments
Open

"rrcreate" command not considering the --role-arn option #316

hojothum opened this issue Jun 3, 2021 · 0 comments

Comments

@hojothum
Copy link

hojothum commented Jun 3, 2021

Issue type

  • Bug report

cli53 version (cli53 --version)

cli53 --version
cli53 version master

pkg search cli53
cli53-0.8.18 Command line tool for Amazon Route 53

OS / Platform

FreeBSD 12.2-RELEASE-p7

Steps to reproduce

  • add ARN role for an EC2 node such that it can assume a role, call it role XYX, that can create Route53 DNS records
  • attempt to assume XYZ role with the cli53 command to "rrcreate" a record
    • cli53 rrcreate ZONEID "some.domain. 60 TXT somevalue" --append --wait --role-arn arn:aws:iam:12345:role/XYZ

Expected behaviour

Command should honor the --role-arn option, assume the role, and add the DNS record into the Route53 zone.

Actual behaviour

The --role-arn option does not seem to be considered and results in the error below:

Error: AccessDenied: User: arn:aws:sts::12345:assumed-role/some_iam_role/i-12345 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::12345:role/XYZ
	status code: 403, request id: 12345

NOTE: copying an older version of this command to the server worked as expected

Have you checked if the documentation has the information you require?

Yes, --role-arn seems to still be a valid option for the "rrcreate" command.

Could you contribute a fix or help testing with this issue?

We would love to test a fix in our environment to see if the issue has been resolved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant