使用bitbucket作为代码管道源时的权限错误

Question

我想使用bitbucket作为源代码，

出现如下权限错误:

我想我应该给权限给AWSCloudFormation角色，但是我怎么能做到呢?

User: arn:aws:sts::678100228133:assumed-role/cdk-hnb659fds-cfn-exec-role-678100228133-us-west-2/AWSCloudFormation is not authorized to perform: codestar-connections:Pas
sConnection on resource: ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar (Service: AWSCodePipeline; Status Code: 400; Error Code: AccessDen
iedException; Request ID: 0d152b96-e756-4821-9ad1-7551cb9e8bf7; Proxy: null)

我的cdk代码是这样的，ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar已经手动设置。

const bitbucketSourceOutput = new cdk.aws_codepipeline.Artifact();
const bitbucketSourceAction = new cdk.aws_codepipeline_actions.CodeStarConnectionsSourceAction({
actionName: `ss-${targetEnv}-ecs-bitbucket-build`,
owner: 'aws',
repo: 'myname/testrepo',
output: bitbucketSourceOutput,
connectionArn: 'ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar',
});

Answer 1

ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar不是有效的CodeStar连接ARN。costar连接ARN看起来像这样:arn:aws:codestar-connections:eu-west-1:123456789012:connection/991f-27e07658dd59-344e-44d2-adea40dd

您需要在AWS控制台中创建一个CodeStar连接，并在管道中使用其ARN。