Skip to content

Conversation

@Regenhardt
Copy link

Description

I added the logs:CreateLogGroup action to the task execution policy statement.

Motivation and Context

Creating a task through terraform works, but it doesn't start with the following error displayed in the UI:

ResourceInitializationError: failed to validate logger args: create stream has been retried 1 times: failed to create Cloudwatch log group: AccessDeniedException: User: arn:aws:sts::[redacted]:assumed-role/[redacted]-ecs-task-execution-role/[redacted] is not authorized to perform: logs:CreateLogGroup on resource: arn:aws:logs:eu-central-1:[redacted]:log-group:[redacted]:log-stream: because no identity-based policy allows the logs:CreateLogGroup action : exit status 1 

Breaking Changes

No, fixes the latest major version.

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request

I tested it with our own project, locally. I don't have an AWS account to deploy anything I want in.

@Regenhardt Regenhardt force-pushed the feature/create-log-group-policy branch from 29d2713 to 71a4fc1 Compare July 11, 2025 08:13
@Regenhardt Regenhardt changed the title Add logs:CreateLogGroup action to task execution policy fix: Add logs:CreateLogGroup action to task execution policy Jul 11, 2025
@Regenhardt Regenhardt marked this pull request as draft July 11, 2025 13:59
@Regenhardt
Copy link
Author

To Draft: Testet it again, doesn't work now.

@bryantbiggs
Copy link
Member

we don't add this permission because we use Terraform to create the log group

resource "aws_cloudwatch_log_group" "this" {

@Regenhardt Regenhardt deleted the feature/create-log-group-policy branch July 11, 2025 14:04
@github-actions
Copy link

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 11, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

2 participants