CREATE_FAILED when running "cdk deploy"

[derektumulak]

Hi, I am new to CDK and considering using it. I am trying to get the AppSyncGraphQLDynamoDB example working. When I run cdk deploy I get the following error:

  0/12 | 08:47:22 | CREATE_IN_PROGRESS   | AWS::IAM::Role              | ItemsDynamoDBRole (ItemsDynamoDBRole7D2E3F6D) 
  0/12 | 08:47:22 | CREATE_IN_PROGRESS   | AWS::IAM::Role              | ItemsDynamoDBRole (ItemsDynamoDBRole7D2E3F6D) Resource creation Initiated
  0/12 | 08:47:22 | CREATE_IN_PROGRESS   | AWS::DynamoDB::Table        | ItemsTable (ItemsTable5AAC2C46) Resource creation Initiated
  1/12 | 08:47:22 | CREATE_FAILED        | AWS::IAM::Role              | ItemsDynamoDBRole (ItemsDynamoDBRole7D2E3F6D) ARN arn:aws:iam::aws:policy/arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess is not valid. (Service: AmazonIdentityManagement; Status Code: 400; Error Code: InvalidInput; Request ID: fda7a95a-aaca-11e9-8b34-71c203c1eb46)
        new Role (/home/ec2-user/environment/kloudkrypt/node_modules/@aws-cdk/aws-iam/lib/role.js:30:22)
        \_ new AppSyncCdkStack (/home/ec2-user/environment/kloudkrypt/index.js:50:32)
        \_ Object.<anonymous> (/home/ec2-user/environment/kloudkrypt/index.js:130:1)
        \_ Module._compile (module.js:653:30)
        \_ Object.Module._extensions..js (module.js:664:10)
        \_ Module.load (module.js:566:32)
        \_ tryModuleLoad (module.js:506:12)
        \_ Function.Module._load (module.js:498:3)
        \_ Function.Module.runMain (module.js:694:10)
        \_ startup (bootstrap_node.js:204:16)
        \_ bootstrap_node.js:625:3

Any suggestions?

Thanks,
-Derek

[rhboyd]

I'll dig into the example to find the bug, but it's probably related to a change in how AWS-managed policies are referenced.

arn:aws:iam::aws:policy/arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess

should be
arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess

It used to require the full ARN, but a recent change in CDK made it possible to just specify the name and the toolkit will prepend the rest of the ARN.

[rhboyd]

Here's the change you should make locally to get it to work

83e181e

[derektumulak]

Thank you for the quick response Richard. That got me past the error. Another error has now shown up:

 5/12 | 23:37:25 | CREATE_FAILED        | AWS::AppSync::Resolver      | GetAllQueryResolver No data source found named ItemsDynamoDataSource (Service: AWSAppSync; Status Code: 404; Error Code: NotFoundException; Request ID: 7dffc897-ac10-11e9-9f96-cbb7bbb1a52a)

Best,
-Derek

[yyolk]

@derektumulak I get the same error as you. see #78 if you want a workaround for that example until @rhboyd comments in that PR are addressed

[derektumulak]

Thanks Joseph. I’ll take a look at your suggestion. Best, Derek

…

On Jul 24, 2019, at 2:14 PM, Joseph Chiocchi ***@***.***> wrote: @derektumulak I get the same error as you. see #78 if you want a workaround for that example until @rhboyd comments in that PR are addressed — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[NGL321]

It looks like the initial bug discovered here was resolved in #86, and the second bug is encapsulated under #78.

I am going to close this issue for now as resolved. Feel free to re-open if I am incorrect.

😸