cli53 icon indicating copy to clipboard operation
cli53 copied to clipboard

"rrcreate" command not considering the --role-arn option

Open hojothum opened this issue 4 years ago • 0 comments

Issue type

  • Bug report

cli53 version (cli53 --version)

cli53 --version cli53 version master

pkg search cli53 cli53-0.8.18 Command line tool for Amazon Route 53

OS / Platform

FreeBSD 12.2-RELEASE-p7

Steps to reproduce

  • add ARN role for an EC2 node such that it can assume a role, call it role XYX, that can create Route53 DNS records
  • attempt to assume XYZ role with the cli53 command to "rrcreate" a record
    • cli53 rrcreate ZONEID "some.domain. 60 TXT somevalue" --append --wait --role-arn arn:aws:iam:12345:role/XYZ

Expected behaviour

Command should honor the --role-arn option, assume the role, and add the DNS record into the Route53 zone.

Actual behaviour

The --role-arn option does not seem to be considered and results in the error below:

Error: AccessDenied: User: arn:aws:sts::12345:assumed-role/some_iam_role/i-12345 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::12345:role/XYZ
	status code: 403, request id: 12345

NOTE: copying an older version of this command to the server worked as expected

Have you checked if the documentation has the information you require?

Yes, --role-arn seems to still be a valid option for the "rrcreate" command.

Could you contribute a fix or help testing with this issue?

We would love to test a fix in our environment to see if the issue has been resolved.

hojothum avatar Jun 03 '21 20:06 hojothum