Skip to content

Conversation

m9rc1n
Copy link
Contributor

@m9rc1n m9rc1n commented May 26, 2023

Hi, thanks for merging the previous PR.

We have experienced 1 more issue when deploying our lambdas. After adding 50+ lambdas the execution role policy failed due to AWS IAM Policy limits.

Role policy size cannot exceed 10,240 characters.

from https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html

Our fix was to add 1 more flag to the configuration disabling the automated queue policy.

@NoxHarmonium
Copy link
Collaborator

Hey @m9rc1n, just a thought, would it also work if we split up the policy if it was too large and attached multiple policies per role?

@m9rc1n
Copy link
Contributor Author

m9rc1n commented Jun 2, 2023

Hi @NoxHarmonium,

Unfortunately splitting up policy (into inline policies) won't work :/

From docs:

You can add as many inline policies as you want to an IAM user, role, or group. But the total aggregate policy size (the sum size of all inline policies) per entity can't exceed the following limits:

  • User policy size can't exceed 2,048 characters.
  • Role policy size can't exceed 10,240 characters.
  • Group policy size can't exceed 5,120 characters.

@m9rc1n m9rc1n changed the title Add option to disable queue policy feat: Add option to disable queue policy Jun 12, 2023
@m9rc1n m9rc1n force-pushed the add-option-to-disable-queue-policy branch from 13d05fe to 7144d11 Compare June 12, 2023 20:20
@m9rc1n m9rc1n force-pushed the add-option-to-disable-queue-policy branch from 7144d11 to db364b9 Compare June 12, 2023 20:21
@m9rc1n
Copy link
Contributor Author

m9rc1n commented Jun 22, 2023

Hi @NoxHarmonium,

I have updated PR to match commit requirements.
Let me know if I can help you with reviewing process

Best regards,
Marcin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants