Check role ARN

Check if role ARN matches the role name (boto3 get_role works by name, not by arn)
data-dot-all · Jan 9, 2024 · b7400c8 · b7400c8
1 parent 964ea7b
commit b7400c8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/backend/dataall/base/aws/iam.py b/backend/dataall/base/aws/iam.py
@@ -20,6 +20,7 @@ def get_role(account_id: str, role_arn: str, role=None):
             response = iamcli.get_role(
                 RoleName=role_arn.split("/")[-1]
             )
+            assert response['Role']['Arn'] == role_arn, "Arn doesn't match the role name. Check Arn and try again."
         except Exception as e:
             log.error(
                 f'Failed to get role {role_arn} due to: {e}'