使用bitbucket作为代码源时出现的权限错误

Question

我想用bitbucket作为源，

我的权限错误如下所示。

我想我应该允许AWSCloudFormation角色，但是我该怎么做呢？

User: arn:aws:sts::678100228133:assumed-role/cdk-hnb659fds-cfn-exec-role-678100228133-us-west-2/AWSCloudFormation is not authorized to perform: codestar-connections:Pas
sConnection on resource: ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar (Service: AWSCodePipeline; Status Code: 400; Error Code: AccessDen
iedException; Request ID: 0d152b96-e756-4821-9ad1-7551cb9e8bf7; Proxy: null)

我的cdk代码是这样的，ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar已经手动设置了。

const bitbucketSourceOutput = new cdk.aws_codepipeline.Artifact();
const bitbucketSourceAction = new cdk.aws_codepipeline_actions.CodeStarConnectionsSourceAction({
  actionName: `ss-${targetEnv}-ecs-bitbucket-build`,
  owner: 'aws',
  repo: 'myname/testrepo',
  output: bitbucketSourceOutput,
  connectionArn: 'ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar',
});

Answer 1

ari:cloud:bitbucket::app/{67a68345-bf8e-49c5-8eca-833727e2d892}/aws-codestar不是有效的CodeStar连接ARN。代码基座连接ARN如下所示：arn:aws:codestar-connections:eu-west-1:123456789012:connection/991f-27e07658dd59-344e-44d2-adea40dd

您需要在AWS控制台中创建一个CodeStar连接，并在管道中使用它的ARN。