Issue while creating an application with AWS Mainframe Modernization tutorial

Question

getting the below error message:, while creating an application

Failure reason
User: arn:aws:sts::986819762195:assumed-role/ApplicationWorkflow-prod-CreateApplicationVersion-PHHF7HEQQOF8/ApplicationWorkflow-prod--CreateApplicationVersion-moc8renm2qVp is not authorized to perform: secretsmanager:GetSecretValue on resource: arn:aws:secretsmanager:us-east-1:005294968816:secret:PostgreSQL_database-1-n0A0BC because no resource-based policy allows the secretsmanager:GetSecretValue action (Service: SecretsManager, Status Code: 400, Request ID: 875af5f7-fba3-4054-b512-b785f9b2faf4)

Answer

Hi, 
(I am part of the Mainframe Modernization service team).
How did you start you app via console or CLI or CloudFormation?

If CLI or CFN, can you post here you script / template to start the app?

Answer

Please check Step 2 in the following tutorial

https://docs.aws.amazon.com/m2/latest/userguide/tutorial-runtime-mf.html

The following resource based policy needs to be added to the secrets that you created
{
  "Version" : "2012-10-17",
  "Statement" : [ {
    "Effect" : "Allow",
    "Principal" : {
      "Service" : "m2.amazonaws.com"
    },
    "Action" : "secretsmanager:GetSecretValue",
    "Resource" : "*"
  } ]
}

Issue while creating an application with AWS Mainframe Modernization tutorial

Relevant content