[GH-ISSUE #66] IPA doesn't generate permissions for SDK method calls like describe_db_clusters #146

Closed
opened 2026-03-15 11:47:15 +03:00 by kerem · 1 comment
Owner

Originally created by @mschlaipfer on GitHub (Dec 10, 2025).
Original GitHub issue: https://github.com/awslabs/iam-policy-autopilot/issues/66

Originally assigned to: @mschlaipfer on GitHub.

We received a report that modify_db_cluster, modify_db_cluster, and modify_db_instance are missed by IPA. I assume this is due to a bug in how we rename Python's camel case method names to the respective operation names which have a DB in their name.

Originally created by @mschlaipfer on GitHub (Dec 10, 2025). Original GitHub issue: https://github.com/awslabs/iam-policy-autopilot/issues/66 Originally assigned to: @mschlaipfer on GitHub. We received a report that `modify_db_cluster`, `modify_db_cluster`, and `modify_db_instance` are missed by IPA. I assume this is due to a bug in how we rename Python's camel case method names to the respective operation names which have a `DB` in their name.
kerem 2026-03-15 11:47:15 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@mschlaipfer commented on GitHub (Dec 10, 2025):

The bug comes from renaming the extracted method name back to the operation name in the service reference. describe_db_clusters is translated back to DescribeDbClusters, but the service reference stores the operation name DescribeDBClusters. We need to store the operation name as found in the SDK model to use it in the lookup. Working on a fix.

<!-- gh-comment-id:3636328364 --> @mschlaipfer commented on GitHub (Dec 10, 2025): The bug comes from renaming the extracted method name back to the operation name in the service reference. `describe_db_clusters` is translated back to `DescribeDbClusters`, but the service reference stores the operation name `DescribeDBClusters`. We need to store the operation name as found in the SDK model to use it in the lookup. Working on a fix.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/iam-policy-autopilot#146
No description provided.