Got error when create new Scheduler with EventBridge: "The execution role you provide must allow AWS EventBridge Scheduler to assume the role"

0

Hi all, I am trying to create a new scheduler following this article https://docs.aws.amazon.com/eventbridge/index.html But I face the error when confirming at the final step: "The execution role you provide must allow AWS EventBridge Scheduler to assume the role" Do you have any idea how to fix the missing permission?

The execution role you provide must allow AWS EventBridge Scheduler to assume the role

已提問 1 年前檢視次數 2628 次
4 個答案
0

Hi there, yes I already added trusted entities like this, but still got the error when creating the scheduler. added trusted entities

已回答 1 年前
  • Can I set it up by changing aws:SourceArn as follows?

    arn:aws:scheduler:ap-southeast-1:xxxxxx:schedule/xxxx_ScheduleGroup*
    
  • Hi there, tried update aws:SourceAccount as your suggested, but still got the error "The execution role you provide must allow AWS EventBridge Scheduler to assume the role."

  • Is the "condition" part absolutely necessary? If it is not needed, it can be deleted.

0

An execution role is an IAM role that EventBridge Scheduler assumes in order to interact with other AWS services on your behalf. You attach permission policies to this role to grant EventBridge Scheduler access to invoke targets.

Please see a reference example for the same : https://docs.aws.amazon.com/scheduler/latest/UserGuide/setting-up.html

profile pictureAWS
專家
已回答 1 年前
  • Yes, followed the doc for both "Create new role" or "Use existing role" but still stuck with the error "The execution role you provide must allow AWS EventBridge Scheduler to assume the role."

0

This can occur when there is no "sts:AssumeRole" in "scheduler.amazonaws.com" in the trusted entity of the execution role that was set when creating the EventBridge Scheduler.
Check to see if the following entities are set up.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "scheduler.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}
profile picture
專家
已回答 1 年前
0

I gave up and switched to Google Cloud Scheduler https://firebase.google.com/docs/functions/schedule-functions, everything working fine now. Thanks all!

已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南