Skip to content

clean up some deployment issues, configure repo setup with uv#7

Open
hrodmn wants to merge 6 commits intomainfrom
chore/cleanup
Open

clean up some deployment issues, configure repo setup with uv#7
hrodmn wants to merge 6 commits intomainfrom
chore/cleanup

Conversation

@hrodmn
Copy link
Contributor

@hrodmn hrodmn commented Mar 1, 2025

I was unable to deploy this stack because we were creating/exporting the kms key twice. I also added a pyproject.toml and pre-commit.

resolves #6

@hrodmn hrodmn requested a review from jjfrench March 3, 2025 15:20
Copy link
Member

@jjfrench jjfrench left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for fixing that! I hadn't deployed to see if the changes actually worked

Comment on lines +223 to +225
"kms:PutKeyPolicy",
"kms:ScheduleKeyDeletion",
"kms:CancelKeyDeletion",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tried deploying from the branch and I got this error:

❌  MAAP-STAC-auth-dev failed: _ToolkitError: The stack named MAAP-STAC-auth-dev failed to deploy: UPDATE_ROLLBACK_COMPLETE: Resource handler returned message: "The new key policy will not allow you to update the key policy in the future. (Service: Kms, Status Code: 400, Request ID: f6255fc1-e20c-4c38-962b-a9b0ed722e7e)" (RequestToken: 6b4aefbd-8c0e-cdb3-cab7-aa8fc18f2793, HandlerErrorCode: InvalidRequest)

so I added a few more permissions.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jjfrench have we deployed the custom KMS key yet? There seems to be some more that we need to sort out with that configuration so I am going to temporarily turn that feature off in this branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

avoid creating kms key twice

2 participants

Comments