event_rule_role_arn input ignored in event targets

[cn-terraform]

event_rule_role_arn input ignored in event targets

[jnonino]

Hi, how are you?

event_rule_role_arn is not ignored, it is used in this resource:

resource "aws_cloudwatch_event_rule" "event_rule" {
  name                = var.event_rule_name
  schedule_expression = var.event_rule_schedule_expression
  event_bus_name      = var.event_rule_event_bus_name
  event_pattern       = var.event_rule_event_pattern
  description         = var.event_rule_description
  role_arn            = var.event_rule_role_arn
  is_enabled          = var.event_rule_is_enabled
  tags = {
    Name = "${var.name_prefix}-cw-event-rule"
  }
}

Are you sure you need to have event_rule_role_arn in the event target (module.ecs-fargate-scheduled-task.aws_cloudwatch_event_target.ecs_scheduled_task)??

[tim-faase]

The event target specifies a RoleArn, CloudTrail reported a failure of the event wanting to assume to role of Task and Task Execution.
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/events/put-targets.html#options

{"errorMessage": "User: arn:aws:sts::##:assumed-role/corporate-dev-cli-st-cw-role/## is not authorized to perform: iam:PassRole on resource: arn:aws:iam::##:role/##-task-role-dev-app"}

[jnonino]

Hi @tim-faase, did the change in PR-7 solve the issue?

[tim-faase]

@jnonino yes, sorry for not advising

[jnonino]

No problem @tim-faase, thanks. Please let me know if you have any other issue!!