-
Notifications
You must be signed in to change notification settings - Fork 96
Open
Description
Hi
I've a multi account setup, using Terragrunt, with states centralized in a shared admin account. Attaching the policy to an assumable role, I expected to be done, but turns out I can't deal with the DyanmoDB table
ERRO[0001] AccessDeniedException: User: arn:aws:sts::11111111111111:assumed-role/company-shared-terraform-state-access/222222222222222222 is not authorized to perform: dynamodb:DescribeTable on resource: arn:aws:dynamodb:eu-north-1:333333333333333:table/company-shared-terraform-locks because no identity-based policy allows the dynamodb:DescribeTable action
I'll add this myself, but imho this should be added here
Metadata
Metadata
Assignees
Labels
No labels