Which action should the engineer take to resolve this issue?
Ensure the Lambda function code has exited successfully.
Ensure the Lambda function code returns a response to the pre-signed URL.
Ensure the Lambda function IAM role has cloudformation:UpdateStack permissions for the stack ARN.
Ensure the Lambda function IAM role has ds:ConnectDirectory permissions for the AWS account.
Explanations:
The Lambda function may have exited successfully, but CloudFormation requires a proper response to complete the stack operation.
CloudFormation relies on the Lambda function returning a response to the pre-signed URL to transition from CREATE_IN_PROGRESS to CREATE_COMPLETE.
The required permissions for CloudFormation stack updates are not directly related to the custom resource’s completion process in this context.
Theds:ConnectDirectorypermission allows managing directory services, but the issue here is related to the Lambda response handling by CloudFormation.
I infer that the answer is:
Ensure the Lambda function code returns a response to the pre-signed URL.
I sort that the answer is:
Ensure the Lambda function code returns a response to the pre-signed URL.