question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Keep getting [Error]: CliError: The CloudFormation deploy failed for Alexa region "default": Access Denied

See original GitHub issue

Hi everyone, I had a previous installation of a self hosted openhab-cloud and alexa skill I decided to update to the latest version 3.2.1 I think I setup everything correctly in the AWS side, I also cleaned up the previous lambda like shown in the readme.

The problem is when I use ask deploy, I keep getting this error

==================== Deploy Skill Infrastructure ====================
  × Deploy Alexa skill infrastructure for region "default"
[Error]: CliError: The CloudFormation deploy failed for Alexa region "default": Access Denied

I tried many things but I can’t get it working I’m using windows by the way thank you for your help

Issue Analytics

  • State:closed
  • Created a year ago
  • Comments:6

github_iconTop GitHub Comments

1reaction
combatistorcommented, Jun 27, 2022

It seems to have worked! this is my policy json configuration

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "lambda:CreateFunction",
                "cloudformation:UpdateResource",
                "logs:DescribeLogStreams",
                "iam:CreateRole",
                "s3:CreateBucket",
                "cloudformation:DescribeStackResource",
                "iam:AttachRolePolicy",
                "s3:ListBucket",
                "iam:PutRolePolicy",
                "iam:PassRole",
                "cloudformation:CancelResourceRequest",
                "iam:DeleteRolePolicy",
                "logs:GetLogEvents",
                "cloudformation:UpdateStack",
                "lambda:DeleteFunction",
                "logs:FilterLogEvents",
                "s3:PutBucketVersioning",
                "iam:GetRole",
                "cloudformation:DeleteResource",
                "lambda:ListFunctions",
                "lambda:GetFunction",
                "cloudformation:GetResourceRequestStatus",
                "cloudformation:ListResourceRequests",
                "lambda:UpdateFunctionConfiguration",
                "cloudformation:DescribeStackResources",
                "iam:DeleteRole",
                "s3:GetBucketVersioning",
                "logs:CreateLogGroup",
                "cloudformation:DescribeStacks",
                "lambda:UpdateFunctionCode",
                "cloudformation:ListResources",
                "s3:PutObject",
                "s3:GetObject",
                "lambda:AddPermission",
                "cloudformation:GetResource",
                "cloudformation:CreateStack",
                "cloudformation:CreateResource",
                "logs:PutRetentionPolicy",
                "lambda:RemovePermission",
                "s3:GetObjectVersion"
            ],
            "Resource": "*"
        }
    ]
}

Sorry for the spam

0reactions
combatistorcommented, Jun 27, 2022

getting closer maybe?

Screenshot 2022-06-27 215104

Edit: it seems from here I don’t really know what I’m supposed to do Tried to check the policies but nothing matches this “LogGroup”

Edit2: after clearing the logs using the command in the readme.md: aws logs delete-log-group --log-group-name /aws/lambda/alexa-openhab

I got another error

Screenshot 2022-06-27 220417

Read more comments on GitHub >

github_iconTop Results From Across the Web

ASK-CLI deploy not working for hosting 'AWS with ...
Trying to deploy the skill using ask deploy , getting [Error]: CliError: The CloudFormation deploy failed for Alexa region "default": Access ...
Read more >
Add AWS credentials Policy Permissions For CFN Deployer ...
Keep getting [Error]: CliError: The CloudFormation deploy failed for Alexa region "default": Access Denied openhab/openhab-alexa#509.
Read more >
Ask deploy returns with error message: The CloudFormation ...
I am trying to deploy the alexa-skill with the command: ask deploy The skill ... The CloudFormation deploy failed for Alexa region "default"....
Read more >
Troubleshooting access denied error messages - AWS Identity ...
Access denied when a VPC request fails due to another policy. For the following error, check for an explicit Deny statement for SNS:Publish...
Read more >
Tutorial: Deploying a Hello World application - 亚马逊云科技
This application implements a basic API backend. It consists of an Amazon API Gateway endpoint and an Amazon Lambda function. When you send...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found