Last week I found a brilliant YouTube from Dabble Lab that explains how to use the CLI and how to get some Alexa templates to get started with your own skills development on Amazon. I have been battling with both the CLI and the IAM site for several months now. Today I have “User: arn:aws:iam::123456789123:user/debugUser is not authorized to perform: iam:CreateRole on resource: arn:aws:iam::012345678912:role/ask-lambda-basic-starter” when I try to deploy from CLI. At least can I see what user I am using. This will help a lot! I will now try to find CreateRole on IAM. The “helpful” 2017 AWS IAM setup videos are grossly out of date and I have been COMPLETELY CONFUSED by their tutorials. There are users, groups and roles to do my head in but I can’t find the required “CreateRole” mentioned in the message. There are heaps of others which are difficult to read in the drop-downs because the columns don’t expand. I added a group and a role but didn;t work so deleted.
Now I an trying this way which failed because you can’t create the create-role until you have one. Chicken or egg!
OK just watched ASK-CLI installation to see if I did that right. No clues there. Just another 2 hours wasted today.