[codepipeline] Error : Artifact Bucket must have a KMS Key to add cross-account action
See original GitHub issueReproduction Steps
Environment
- **CLI Version :1.67
- **Framework Version:1.67
- Node.js Version: 14.4.0
- **OS :Windows 10
- Language (Version): TypeScript (4.0.3)
This is 🐛 Bug Report
Issue Analytics
- State:
- Created 3 years ago
- Comments:13 (5 by maintainers)
Top Results From Across the Web
Create a pipeline in CodePipeline that uses resources from ...
Step 1: Set up account policies and roles. After you create the AWS KMS key, you must create and attach policies that will...
Read more >Why codepipline require the KMS key? - Stack Overflow
Data in CodePipeline is encrypted at rest using AWS KMS keys. Code artifacts are stored in a customer-owned S3 bucket and encrypted with...
Read more >@aws-cdk/aws-codepipeline - npm
Customer Master Key (CMK) for you to encrypt the artifacts in the artifact bucket, which incurs a cost of $1/month. This default configuration ......
Read more >Building a cross-account CI/CD pipeline - AWS Workshop Studio
It also configures the S3 bucket to be accessed from a different AWS account, and the AWS Key Management Service (KMS) key to...
Read more >CDK Pipelines - Go Packages
Pipeline `field:"optional" json:"codePipeline" yaml:"codePipeline"` // Create KMS keys for the artifact buckets, allowing cross-account deployments.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Yep, here’s your issue:
You’re importing the Bucket in the other Stack without a Key. Use
fromBucketAttributes
, passing the Key there, and everything will work.Thanks, Adam
Here is the creation script for the bucket and its encryption key in another stack.