CI/CD Pipeline Locked Out: Credentials Not Authorised
The CI/CD credentials do not have the permissions required to apply the configuration. The credentials are valid but lack the policy.
← All break/fix scenarios in Terraform
advancedterraform-provider~25 min
CI/CD Pipeline Locked Out: Credentials Not Authorised
Reported symptoms
- ●The CI/CD pipeline fails with an auth error
- ●The plan is correct
- ●The apply fails before the first resource
Evidence
- · The auth error message
- · The credentials in the CI/CD platform
- · The permissions of the role
Diagnosis and resolutionclick to reveal
Root cause
The CI/CD credentials do not have the permissions required to apply the configuration. The credentials are valid but lack the policy.
Remediation
1. Identify the missing permissions. 2. Add the permissions to the role. 3. Re-run the pipeline. 4. Document the role.
Verification
The pipeline completes, the permissions are documented, and the incident is documented.
Prevention
1. Apply least privilege from the start. 2. Test the CI/CD pipeline in a sandbox account.