AWS CodeDeploy 无权执行：codedeploy:CreateDeployment

Question

我正在尝试 CI/CD 使用 aws CodeDeployand 和 GitHub 中的操作，然后 tutorial。

但在尝试创建部署时出现以下错误：

An error occurred (AccessDeniedException) when calling the CreateDeployment operation: User: arn:aws:iam::***:user/church-managment-bff-s3 is not authorized to perform: codedeploy:CreateDeployment on resource: arn:aws:codedeploy:sa-east-1:***:deploymentgroup:church-managment-bff/church-managment-bff-deploy-group because no identity-based policy allows the codedeploy:CreateDeployment action
Error: Process completed with exit code 254.

我认为这是一个权限问题，但我无法解决，有人可以帮忙吗

Answer 1

您必须为 church-managment-bff-s3 用户添加 codedeploy:CreateDeployment 权限。您可以在 aws 控制台中以 inline policy 的形式为用户执行此操作：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "codedeploy:CreateDeployment",
            "Resource": "*"
        }
    ]
}