Serverless-stack-com: Comments: Debugging Serverless API Issues

[jayair]

Link to chapter - https://serverless-stack.com/chapters/debugging-serverless-api-issues.html

[hollygirouard]

Hi there!

Question for you. Might be a newbie one -

When I try to invoke the role in the policy simulator, I don't have the same options as you. Here's what I have: https://screencast.com/t/izAbP7wm Any idea why?

Trying to troubleshoot a status 403!

Thanks in advance!
-Holly

[jayair]

@hollyewhite Yeah it looks like they've changed the interface a bit. But I tried it just now with the same instructions in the tutorial and it worked.

We'll update the screenshots soon. But let me know if this doesn't work for you.

[jayair]

@hollyewhite Just updated the screenshots - https://github.com/AnomalyInnovations/serverless-stack-com/commit/02bb75eeb579f36397bd2402cc7f21e7295ff1ce

[hollygirouard]

Thank you @jayair! I appreciate it. I ended up having a credential issue. There are so many! I might hit you up for more questions though. This is my first time building a serverless app and honestly, I don't know how I would have figured it out without this tutorial. You're a rockstar.

[l0rdr4t]

I'm currently walking through this tutorial (awesome work, by the way). My apig-test was throwing a "403 Forbidden":

Message: 'User: arn:aws:sts::123456789012:assumed-role/Cognito_testAuth_Role/CognitoIdentityCredentials is not authorized to perform: execute-api:Invoke on resource: arn:aws:execute-api:ap-southeast-2:********5495:a1b2c3d4e5/prod/POST/notes' }

I had to edit the Cognito Auth_Role policy and add the ExecuteAPI service -- this made the API start working, and now I'm wondering if I did something wrong or a step is missing from the Role creation?

[jayair]

@l0rdr4t In this chapter - https://serverless-stack.com/chapters/create-a-cognito-identity-pool.html we add a line to the auth role. Is that the one you had to do?

[l0rdr4t]

@jayair Thanks for the reply, and yes -- now I know where I went wrong; user error and not the documentation!

In my project, the end user won't be uploading documents to an S3 bucket. I intentionally left out the Policy Action s3:* but accidentally left out Policy Action execute-api:Invoke, which was in the same code block.

[jayair]

@l0rdr4t Thanks for reporting back!

[mochfauz]

Hello I got this message, when I try to add new note.
"No credentials" Everbody know how to solve it?

[jayair]

@mbahfauz Can I see the full error?

[jayair]

This issue was moved to https://discourse.serverless-stack.com/t/comments-debugging-serverless-api-issues/143