Skip to content

Allow CodeDeploy configuration lookup - #8

Merged
ali509 merged 1 commit into
mainfrom
fix/codedeploy-config-permission
Jul 16, 2026
Merged

Allow CodeDeploy configuration lookup#8
ali509 merged 1 commit into
mainfrom
fix/codedeploy-config-permission

Conversation

@ali509

@ali509 ali509 commented Jul 16, 2026

Copy link
Copy Markdown
Owner

Summary

  • allow the GitHub deployment role to read CodeDeploy deployment configurations
  • keep the permission scoped to deployment configuration resources in the current account and Region

Reason

The live EC2 workflow authenticated and uploaded immutable artifacts successfully, but CodeDeploy rejected CreateDeployment because it performs a dependent GetDeploymentConfig authorization check.

Validation

  • cfn-lint passed
  • YAML parsing passed
  • whitespace validation passed

@ali509
ali509 merged commit 5ca20fd into main Jul 16, 2026
1 check passed
@ali509
ali509 deleted the fix/codedeploy-config-permission branch July 16, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant