Self-hosted: Unable to Upgrade Panther to v1.44 due to InvalidInputException
Issue
As a self-hosted or CPaaS customer, your upgrade to Panther v1.44 fails, with the error message:
InvalidInputException: Caller is an end user and not allowed to mutate system tags.
Resolution
To resolve this issue:
- Log into your AWS Console and open CodeBuild.
- Locate and delete the project called
panther-pip-layer-builder
. (This will not cause any outage; the project will be recreated upon your next deployment.) - Retry the
panther-pulumi
CodeBuild job.
Cause
This issue occurs due to some changes AWS made to how resources are tagged. By removing panther-pip-layer-builder,
the next deployment must rebuild it, using the latest AWS tagging rules.