code: -2 stdout: stderr: Command failed with exit code 255: pulumi up --yes --skip-preview --parallel 2147483647 --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack docs --non-interactive Updating (docs) View Live: https://app.pulumi.com/cfeenstra67/stackattack/docs/updates/110 Downloading plugin aws-native-1.30.0: starting Downloading plugin random-4.18.2: starting Downloading plugin random-4.18.2: done Downloading plugin command-1.1.0: done Downloading plugin aws-native-1.30.0: done Installing plugin random-4.18.2: starting Installing plugin command-1.1.0: starting Installing plugin aws-native-1.30.0: starting @ Updating.... Installing plugin command-1.1.0: done Installing plugin random-4.18.2: done Installing plugin aws-native-1.30.0: done @ Updating.... pulumi:pulumi:Stack stackattack-docs running @ Updating...................... ~ aws:s3:BucketV2 stackattack-docs-static-site-logs-bucket updating (0s) [diff: +tags,tagsAll] ~ aws:s3:BucketV2 stackattack-docs-bucket updating (0s) [diff: +tags,tagsAll] ~ aws:acm:Certificate stackattack-docs-static-site-certificate updating (0s) [diff: +tags,tagsAll] @ Updating.... ~ aws:lambda:Function stackattack-docs-static-site-lambda-function updating (0s) [diff: +tags,tagsAll] ~ aws:s3:BucketV2 stackattack-docs-static-site-logs-bucket updating (0s) [diff: +tags,tagsAll]; error: sdk-v2/provider2.go:572: sdk.helper_schema: updating tags for S3 (Simple Storage) Bucket (stackattack-docs-static-site-logs-bucket-38c05f4): setting resource tags (stackattack-docs-static-site-logs-bucket-38c05f4): operation error S3: PutBucketTagging, https response error StatusCode: 403, RequestID: ACHAVYP24MC56B3S, HostID: uk9SX7yL/N4us74h6mSjXijd6IalLorA03isKv4fWzCE5Cq+AJsVal2T0bD1T4xR0k3SKIS/YcPupjvQZg9P2A==, api error AccessDenied: User: arn:aws:sts::***:assumed-role/stackattack-docs-github-role-1543232/GitHubActions is not authorized to perform: s3:PutBucketTagging on resource: "arn:aws:s3:::stackattack-docs-static-site-logs-bucket-38c05f4" because no identity-based policy allows the s3:PutBucketTagging action: provider=aws@6.83.0 ~ aws:s3:BucketV2 stackattack-docs-static-site-logs-bucket updating (0s) [diff: +tags,tagsAll]; error: 1 error occurred: ~ aws:s3:BucketV2 stackattack-docs-static-site-logs-bucket **updating failed** [diff: +tags,tagsAll]; error: 1 error occurred: ~ aws:acm:Certificate stackattack-docs-static-site-certificate updating (0s) [diff: +tags,tagsAll]; error: sdk-v2/provider2.go:572: sdk.helper_schema: updating tags for ACM (Certificate Manager) Certificate (arn:aws:acm:us-east-1:***:certificate/d3437733-11dc-4cf5-842e-5241928c6a23): tagging resource (arn:aws:acm:us-east-1:***:certificate/d3437733-11dc-4cf5-842e-5241928c6a23): operation error ACM: AddTagsToCertificate, https response error StatusCode: 400, RequestID: 11fe05a1-323c-472b-a9ec-c1aca67c45c6, api error AccessDeniedException: User: arn:aws:sts::***:assumed-role/stackattack-docs-github-role-1543232/GitHubActions is not authorized to perform: acm:AddTagsToCertificate on resource: arn:aws:acm:us-east-1:***:certificate/d3437733-11dc-4cf5-842e-5241928c6a23 because no identity-based policy allows the acm:AddTagsToCertificate action: provider=aws@6.83.0 ~ aws:acm:Certificate stackattack-docs-static-site-certificate updating (0s) [diff: +tags,tagsAll]; error: 1 error occurred: ~ aws:acm:Certificate stackattack-docs-static-site-certificate **updating failed** [diff: +tags,tagsAll]; error: 1 error occurred: aws:lambda:Function stackattack-docs-static-site-lambda-function error: sdk-v2/provider2.go:572: sdk.helper_schema: updating tags for Lambda Function (arn:aws:lambda:us-east-1:***:function:stackattack-docs-static-site-lambda-function-1079ee0): tagging resource (arn:aws:lambda:us-east-1:***:function:stackattack-docs-static-site-lambda-function-1079ee0): operation error Lambda: TagResource, https response error StatusCode: 403, RequestID: 9a906a16-d38a-45dc-958f-20785ac8cb6e, api error AccessDeniedException: User: arn:aws:sts::***:assumed-role/stackattack-docs-gith