jdhollis / fenna Goto Github PK

This is more of a question. I'm hoping for some advice.

I have followed the steps outlined in How to Bootstrap Multiple Environments on AWS with Terraform & Fenna (Thanks for writing that!).

I noticed that the root account had the root remote state S3 bucket, then the -tools account had all the environment-specific state S3 buckets (dev-state, prod-state, stage-state, tools-state).

I went to setup a bootstrap a new service (a static site).

-> fenna bootstrap

What is this service named?
> my-site.com

What's your backend config repository's URL?
> [email protected]/...

Will this service be developed in a sandbox? [yes no]
> no

Which backend would you like to use? [dev root tools]
> dev

Where is your backend stored? [dev root tools]
> dev

What AWS profile would you like to use as your root profile?
> ops

However, running init gives me an error:

-> fenna init
Initializing modules...
Initializing the backend...
Error refreshing state: AccessDenied: Access Denied
	status code: 403, request id: ..., host id: ...

Looking at the terraform log, I find that access was denied to the dev-state S3 bucket. Terraform has used the ops-dev profile and only the ops-tools profile has access to that bucket.

I tried setting the root profile to ops-tools but same access denied error.

Where have I gone wrong?