Strange error when trying to use codeWhisper on Cloud9 targeting a Lightsail instance

Question

I'm able to connect to my lightsail instance in cloud9 but as soon as I type in the editor, (any filetype for which codeWhisper makes suggestions), I get this error message ...

...******assumed-role/AmazonLightsailInstanceRole/i-08e42184b53ebfe76 is not authorized to perform: codewhisperer:GenerateRecommendations because no identity-based policy allows the codewhisperer:GenerateRecommendations action******

both my root user and the IAM user I created for cloud9 have the available and required cloud 9 and codewhisper policies attached at the user and group level but I can find neither of the "AmazonLightsailInstanceRole", nor the "codewhisperer:GenerateRecommendations" action at any of the user, role, nor policy levels.

All of the other elements of Cloud9 are working correctly but I can't find this permission to add it.

Can anyone give a suggestion on how to add this permission?

Answer

Hello.

When you connect to Lightsail and execute the command below, you will see that "AmazonLightsailInstanceRole" is set.  
"AmazonLightsailInstanceRole" is an IAM role set on the Lightsail infrastructure side, so I don't think it can be changed.  
```
aws sts get-caller-identity
```

So, why not try setting the AWS credentials for the Linux user you set up in Cloud9?  
Try attaching the necessary IAM policy such as "codewhisperer:GenerateRecommendations" to this AWS authentication information.  
Please refer to the following document for setting AWS credentials.  
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html

Strange error when trying to use codeWhisper on Cloud9 targeting a Lightsail instance

Relevant content