-
Notifications
You must be signed in to change notification settings - Fork 4.5k
Closed
Labels
@aws-cdk/aws-iamRelated to AWS Identity and Access ManagementRelated to AWS Identity and Access ManagementbugThis issue is a bug.This issue is a bug.needs-triageThis issue or PR still needs to be triaged.This issue or PR still needs to be triaged.p0
Description
iam.Role.fromRoleArn() with { mutable: false } creates role policies in 1.21.1. This did not occur in <=1.20.0
Reproduction Steps
- Clone my reproduction repo: https://github.com/charlocharlie/mutable-role-repro
npm icdk synth- Observe template
- Downgrade to 1.20.0
npm icdk synth- Observe template without any role policies
Or just view the synth-1.20.0.json and synth-1.21.1.json in the repro.
Error Log
Causes many issues when deploying to a role-strict environment.
Environment
- CLI Version : 1.21.1
- Framework Version: 1.21.1
- OS : macOS
- Language : Typescript
This is 🐛 Bug Report
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
@aws-cdk/aws-iamRelated to AWS Identity and Access ManagementRelated to AWS Identity and Access ManagementbugThis issue is a bug.This issue is a bug.needs-triageThis issue or PR still needs to be triaged.This issue or PR still needs to be triaged.p0