[@aws-cdk/aws-codecommit]: Repo can't find s3 bucket when deployed.

[fsmikedev]

What is the problem?

I'm trying to create a codecommit repo with the contents of an s3 bucket.

Reproduction Steps

    const bucket = new s3.Bucket(this, `bucket-${account}`, {
      bucketName: `bucket-${account}`,
      autoDeleteObjects: true,
      publicReadAccess: true,
      removalPolicy: cdk.RemovalPolicy.DESTROY,
    });

    const bucketDeploy = new s3deploy.BucketDeployment(this, `bucket-deploy-${account}`, {
      sources: [s3deploy.Source.asset(path.join(__dirname, "tmp"))],
      destinationBucket: bucket,
      destinationKeyPrefix: "test",
    });

    const repo = new codecommit.CfnRepository(this, "test-repo", {
      repositoryName: "test-repo",
      code: {
        branchName: "main",
        s3: {
          bucket: `bucket-${account}`,
          key: "test",
        },
      },
    });

    repo.node.addDependency(bucketDeploy);

What did you expect to happen?

The test repo would have contents deployed from the s3 bucket.

What actually happened?

An error when cdk deploy is called.

51/55 | 18:40:00 | CREATE_FAILED | AWS::CodeCommit::Repository | test-repo/test-repo (testrepoCE419A0A) Not Found (Service: Amazon S3; Status Code: 404; Error Code: 404 Not Found

CDK CLI Version

1.127.0

Framework Version

No response

Node.js Version

14.17.1

OS

Windows 10

Language

Typescript

Language Version

4.4.3

Other information

No response

[skinny85]

Hey @fsmikedev,

thanks for opening the issue. Can you try this, and see if that helps?

    const repo = new codecommit.CfnRepository(this, "test-repo", {
      repositoryName: bucket.bucketName, // <--- here's the difference
      code: {
        branchName: "main",
        s3: {
          bucket: `bucket-${account}`,
          key: "test",
        },
      },
    });

[fsmikedev]

Hi @skinny85, unfortunately that didn't change anything, still the same error.

[skinny85]

Hmmm... I wonder if the problem are not missing permissions?

Can you try giving the codecommit.amazonaws.com Service Principal permissions to read from bucket, and see if that fixes the problem?

[fsmikedev]

I thought the same so I set publicReadAccess: true, I'll try the above, could you confirm the way to do that please? so I know I haven't applied it incorrectly, thanks.

[skinny85]

Something like this:

        const bucket = new s3.Bucket(this, 'Bucket');
        bucket.addToResourcePolicy(new iam.PolicyStatement({
            actions: ['s3:*'],
            resources: [
                bucket.bucketArn,
                bucket.arnForObjects('*'),
            ],
            principals: [new iam.ServicePrincipal('codecommit.amazonaws.com')],
        }));

"s3:*" is too wide of course, but will do for a simple test.

[fsmikedev]

Thanks.

Still no luck, same issue...I did find this post on stackoverflow, I've already added the BucketDeployment dependency to the repo.

https://stackoverflow.com/questions/63230623/aws-cdk-s3-to-codecommit-deployment

[skinny85]

Hmm, this answer from that question is interesting: https://stackoverflow.com/a/64746898/10787899 (look at what it says about unzipping the contents).

[NGL321]

Hey @fsmikedev,

Have you tried adding an ordering dependency as described in the the stackoverflow response? If that doesnt resolve the issue we can keep this issue open and look into it further.

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[fsmikedev]

Hi @NGL321, yes that was the first thing I tried. I've checked my bucket layout and it matches what is expected by the codecommit repot bucket and key. I'm not sure what to try next.

[fsmikedev]

Hi all, anymore suggestions for this? I need to get this working somehow, thanks.

[fsmikedev]

...I've given up trying to get this to work. I'm using a lambda now.

[skinny85]

@fsmikedev did you do what this StackOverflow answer suggests? https://stackoverflow.com/questions/63230623/aws-cdk-s3-to-codecommit-deployment/64746898#64746898 (take special note of what is says about unzipping)

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.