AWS CodeDeploy 無權執行：codedeploy:CreateDeployment

Question

我正在嘗試使用 aws CodeDeployand 和 GitHub Actions 執行 CI/CD，遵循本教程。

但是嘗試創建部署時出現以下錯誤：

An error occurred (AccessDeniedException) when calling the CreateDeployment operation: User: arn:aws:iam::***:user/church-managment-bff-s3 is not authorized to perform: codedeploy:CreateDeployment on resource: arn:aws:codedeploy:sa-east-1:***:deploymentgroup:church-managment-bff/church-managment-bff-deploy-group because no identity-based policy allows the codedeploy:CreateDeployment action
Error: Process completed with exit code 254.

我相信這是一個權限問題，但我無法解決它，請有人幫忙

Answer 1

您必須為church-managment-bff-s3用戶添加codedeploy:CreateDeployment權限。 您可以在 aws 控制台中將其作為用戶的內聯策略執行：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "codedeploy:CreateDeployment",
            "Resource": "*"
        }
    ]
}