published

Terraform IAM PassRole Debugging

Terraform can create a Lambda function, but the apply fails because of a missing or unsafe IAM permission.

What you will learn

Debug iam:PassRole failures
Scope IAM permissions safely
Reason about Terraform apply errors

Catalog tags

Intermediate IAM Lambda Terraform GitHub Actions

Prerequisites

You need an AWS account, Terraform, AWS CLI credentials with permission to create the listed resources, and enough comfort with shell commands to inspect failures.