#10594 Invalidating AWS CloudFronts caches needed under copr user
Closed: Fixed with Explanation by mobrien. Opened by praiskup.

We are getting this error:

$ aws cloudfront create-invalidation --distribution-id EX55ITR8LVMOH --paths "/results/praiskup/ping/epel-8-x86_64/03294046-dummy-pkg/*"
An error occurred (AccessDenied) when calling the CreateInvalidation operation: User: arn:aws:iam::125523088429:user/copr is not authorized to perform: cloudfront:CreateInvalidation on resource: arn:aws:cloudfront::125523088429:distribution/EX55ITR8LVMOH because no identity-based policy allows the cloudfront:CreateInvalidation action

Added a policy to the user to allow invalidate the 2 cloudfront cdns associated with copr

Metadata Update from @mobrien:
- Issue close_status updated to: Fixed with Explanation
- Issue status updated to: Closed (was: Open)

Commit ebcee00c relates to this ticket

Metadata
Related Pull Requests