Error map

role cannot be assumed by Lambda InvalidParameterValueException: The role defined for the function cannot be assumed by Lambda

AWS · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (11). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

role cannot be assumed by Lambda — InvalidParameterValueException: The role defined for the function cannot be assumed by Lambda (AWS)role cannot…RequestEntityTooLargeException — Lambda: Request must be smaller than 6291456 bytes for the InvokeFunction operation (RequestEntityTooLargeException) (AWS)RequestEntityTooLar…Malformed Lambda proxy response — API Gateway {"message": "Internal server error"} 502 — Malformed Lambda proxy response (AWS)Malformed Lambda pr…Not allowed — WordPress: Sorry, you are not allowed to access this page. (WordPress)Not allowedIAM AccessDeniedException — AccessDeniedException: User: arn:aws:iam::... is not authorized to perform: service:Action on resource: ... (AWS)IAM AccessDeniedExc…ResourceInitializationError — ECS: ResourceInitializationError: unable to pull secrets or registry auth (AWS)ResourceInitializat…sts:AssumeRole denied — is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/... (AWS)sts:AssumeRole deni…Runtime.ImportModuleError — Runtime.ImportModuleError: Unable to import module 'lambda_function': No module named 'x' (AWS)Runtime.ImportModul…Runtime.HandlerNotFound — Runtime.HandlerNotFound: index.handler is undefined or not exported (AWS)Runtime.HandlerNotF…Runtime exited with error: signal: killed — Lambda: Runtime exited with error: signal: killed (Runtime.ExitError) (AWS)Runtime exited with…Unzipped size must be smaller than 262144000 bytes — Lambda: Unzipped size must be smaller than 262144000 bytes (AWS)Unzipped size must …KMS AccessDenied kms:Decrypt — KMS: not authorized to perform: kms:Decrypt (or the key policy does not allow access) (AWS)KMS AccessDenied km…413 — HTTP 413 Content Too Large (Request Entity Too Large) (HTTP)413EMFILE — Too many open files (EMFILE) (Linux)EMFILETask timed out — AWS Lambda: Task timed out after X seconds (AWS)Task timed out500 — HTTP 500 Internal Server Error (HTTP)500502 — HTTP 502 Bad Gateway (HTTP)502Endpoint request timed out — API Gateway: {"message": "Endpoint request timed out"} (504 after 29 seconds) (AWS)Endpoint request ti…403 — HTTP 403 Forbidden (HTTP)403DB connection — WordPress: Error Establishing a Database Connection (WordPress)DB connectionCritical error — WordPress: There Has Been a Critical Error on This Website (WordPress)Critical errorAccessDenied — AWS S3: AccessDenied (403) when calling GetObject / PutObject (AWS)AccessDeniedAuthorizationFailed — Azure: AuthorizationFailed — The client does not have authorization to perform action (Azure)AuthorizationFailedPERMISSION_DENIED — PERMISSION_DENIED: The caller does not have permission (insufficient permissions) (Authentication)PERMISSION_DENIEDCreateContainerConfigError — Kubernetes: CreateContainerConfigError — secret / configmap not found (Kubernetes)CreateContainerConf…CannotPullContainerError — ECS task stopped: CannotPullContainerError: pull image manifest has been retried ... / ref pull has been retried (AWS)CannotPullContainer…Essential container in task exited — ECS: Essential container in task exited (task keeps stopping) (AWS)Essential container…ExpiredToken — AWS: ExpiredToken — The security token included in the request is expired (AWS)ExpiredTokenNoCredentialsError — AWS: Unable to locate credentials / Could not load credentials from any providers (AWS)NoCredentialsErrorAADSTS70021 — AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity) (Azure)AADSTS70021ERESOLVE — npm ERR! code ERESOLVE — unable to resolve dependency tree (npm)ERESOLVEMODULE_NOT_FOUND — Error: Cannot find module 'x' (MODULE_NOT_FOUND) (Node.js)MODULE_NOT_FOUNDCould not resolve — Gradle: Could not resolve all files for configuration / Could not resolve dependency (Android)Could not resolveTypeError: not a function — TypeError: x is not a function (JavaScript)TypeError: not a fu…redirect_uri_mismatch — OAuth Error: redirect_uri_mismatch (Authentication)redirect_uri_mismat…divergent branches — hint: You have divergent branches and need to specify how to reconcile them. (Git)divergent branchesOOMKilled — Kubernetes: OOMKilled (exit code 137) (Kubernetes)OOMKilledOutOfMemoryError — java.lang.OutOfMemoryError: Java heap space (Java)OutOfMemoryErrorMEMORY_MANAGEMENT — Blue Screen: MEMORY_MANAGEMENT (Stop code 0x0000001A) (Windows)MEMORY_MANAGEMENTfork: retry: Resource temporarily unavailable — fork: retry: Resource temporarily unavailable (process/thread limit) (Linux)fork: retry: Resour…1025 — Cloudflare Error 1025: Please check back later (Workers request limit) (Cloudflare)10251102 — Cloudflare Error 1102: Worker exceeded resource limits (CPU time / memory) (Cloudflare)1102UnauthorizedOperation — An error occurred (UnauthorizedOperation): You are not authorized to perform this operation. Encoded authorization failure message: ... (AWS)UnauthorizedOperati…

Directly related (11)

RequestEntityTooLargeExceptionAWS

Lambda: Request must be smaller than 6291456 bytes for the InvokeFunction operation (RequestEntityTooLargeException)

The event payload (or response) is over Lambda’s 6 MB synchronous limit (256 KB for async invocations).

Malformed Lambda proxy responseAWS

API Gateway {"message": "Internal server error"} 502 — Malformed Lambda proxy response

The Lambda behind an API Gateway proxy integration returned something that isn’t the required {statusCode, headers, body} shape,…

Not allowedWordPress

WordPress: Sorry, you are not allowed to access this page.

Your user role lacks the capability for that admin screen — or the database table prefix / user capabilities are out of sync afte…

IAM AccessDeniedExceptionAWS

AccessDeniedException: User: arn:aws:iam::... is not authorized to perform: service:Action on resource: ...

The IAM user or role making the call has no permission for that action on that resource — the message names both.

ResourceInitializationErrorAWS

ECS: ResourceInitializationError: unable to pull secrets or registry auth

Fargate couldn’t fetch the task’s secrets (Secrets Manager/SSM) or registry credentials before starting containers.

sts:AssumeRole deniedAWS

is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/...

The caller can’t assume the role — either its own policy doesn’t allow sts:AssumeRole, or the role’s trust policy doesn’t trust t…

Runtime.ImportModuleErrorAWS

Runtime.ImportModuleError: Unable to import module 'lambda_function': No module named 'x'

Lambda couldn’t load your handler file or one of its dependencies — the package is missing from the deployment zip/layer or the h…

Runtime.HandlerNotFoundAWS

Runtime.HandlerNotFound: index.handler is undefined or not exported

Lambda loaded the file but couldn’t find the function named in the handler setting.

Runtime exited with error: signal: killedAWS

Lambda: Runtime exited with error: signal: killed (Runtime.ExitError)

The function process was killed — almost always because it ran out of its configured memory.

Unzipped size must be smaller than 262144000 bytesAWS

Lambda: Unzipped size must be smaller than 262144000 bytes

The function code plus layers exceed Lambda’s 250 MB unzipped limit for zip deployments.

KMS AccessDenied kms:DecryptAWS

KMS: not authorized to perform: kms:Decrypt (or the key policy does not allow access)

The caller can’t use the KMS key that encrypts the data — the key policy or IAM policy doesn’t allow kms:Decrypt/GenerateDataKey.

Two steps away (31)

413HTTP

HTTP 413 Content Too Large (Request Entity Too Large)

The request body is bigger than the server is willing to accept — usually a file upload over the configured limit.

EMFILELinux

Too many open files (EMFILE)

The process hit its file-descriptor limit — sockets, files and pipes all count.

Task timed outAWS

AWS Lambda: Task timed out after X seconds

The function ran longer than its configured timeout (default 3 seconds) and Lambda stopped it.

500HTTP

HTTP 500 Internal Server Error

The server hit an unexpected condition — usually an unhandled exception or misconfiguration in the application.

502HTTP

HTTP 502 Bad Gateway

A proxy or gateway (Nginx, load balancer, CDN) got an invalid response — or no response — from the upstream server behind it.

Endpoint request timed outAWS

API Gateway: {"message": "Endpoint request timed out"} (504 after 29 seconds)

The backend (usually Lambda) didn’t respond within API Gateway’s integration timeout (29 seconds by default for REST APIs).

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

DB connectionWordPress

WordPress: Error Establishing a Database Connection

WordPress can’t connect to its MySQL/MariaDB database with the credentials in wp-config.php, or the database server is down.

Critical errorWordPress

WordPress: There Has Been a Critical Error on This Website

A PHP fatal error (usually from a plugin or theme) stopped WordPress; the real error is in the debug log or recovery-mode email.

AccessDeniedAWS

AWS S3: AccessDenied (403) when calling GetObject / PutObject

An IAM policy, bucket policy, ACL/ownership setting, Block Public Access or KMS key policy denied the S3 request.

AuthorizationFailedAzure

Azure: AuthorizationFailed — The client does not have authorization to perform action

The signed-in identity (user, service principal or managed identity) lacks an Azure RBAC role for that action on that scope.

PERMISSION_DENIEDAuthentication

PERMISSION_DENIED: The caller does not have permission (insufficient permissions)

You are authenticated, but your identity isn’t allowed to perform this action on this resource.

CreateContainerConfigErrorKubernetes

Kubernetes: CreateContainerConfigError — secret / configmap not found

Kubernetes can’t build the container’s configuration — usually a referenced Secret, ConfigMap or key doesn’t exist in that namesp…

CannotPullContainerErrorAWS

ECS task stopped: CannotPullContainerError: pull image manifest has been retried ... / ref pull has been retried

The ECS task couldn’t pull its image — no network route to the registry, missing ECR permissions, or a wrong image tag.

Essential container in task exitedAWS

ECS: Essential container in task exited (task keeps stopping)

The main (essential) container stopped, so ECS stopped the whole task and the service keeps replacing it.

ExpiredTokenAWS

AWS: ExpiredToken — The security token included in the request is expired

Temporary AWS credentials (STS/SSO/assumed role) have expired.

NoCredentialsErrorAWS

AWS: Unable to locate credentials / Could not load credentials from any providers

The AWS CLI/SDK found no credentials in any place it looks — env vars, profile files, SSO cache or an instance/task role.

AADSTS70021Azure

AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity)

The OIDC token from GitHub Actions/Kubernetes/another IdP doesn’t match any federated credential on the app — issuer, subject or…

ERESOLVEnpm

npm ERR! code ERESOLVE — unable to resolve dependency tree

npm 7+ found conflicting peer dependency requirements and refuses to install a broken tree.

MODULE_NOT_FOUNDNode.js

Error: Cannot find module 'x' (MODULE_NOT_FOUND)

Node can’t resolve the module path — the package isn’t installed, or a relative path/extension is wrong.

Could not resolveAndroid

Gradle: Could not resolve all files for configuration / Could not resolve dependency

Gradle couldn’t download a dependency — wrong coordinates/version, missing repository, offline mode, or network/proxy issues.

TypeError: not a functionJavaScript

TypeError: x is not a function

You called something as a function, but its value is not a function (it’s undefined, a string, an object…).

redirect_uri_mismatchAuthentication

OAuth Error: redirect_uri_mismatch

The redirect URI in your OAuth request doesn’t exactly match one registered for the client in the provider’s console.

divergent branchesGit

hint: You have divergent branches and need to specify how to reconcile them.

Git 2.27+ asks you to choose merge, rebase or fast-forward-only when local and remote both have new commits.

OOMKilledKubernetes

Kubernetes: OOMKilled (exit code 137)

The container used more memory than its limit, and the kernel killed it.

OutOfMemoryErrorJava

java.lang.OutOfMemoryError: Java heap space

The JVM ran out of heap memory and garbage collection couldn’t free enough.

MEMORY_MANAGEMENTWindows

Blue Screen: MEMORY_MANAGEMENT (Stop code 0x0000001A)

Windows detected a severe memory-management error — commonly faulty RAM, unstable memory settings or a bad driver.

fork: retry: Resource temporarily unavailableLinux

fork: retry: Resource temporarily unavailable (process/thread limit)

The user or container hit its maximum number of processes/threads (ulimit -u, pids cgroup), so new processes can’t be created.

1025Cloudflare

Cloudflare Error 1025: Please check back later (Workers request limit)

The site’s Cloudflare Workers plan exceeded its daily request limit (free plan: 100,000 requests/day).

1102Cloudflare

Cloudflare Error 1102: Worker exceeded resource limits (CPU time / memory)

The Worker used more CPU time or memory than its plan allows for a single request.

UnauthorizedOperationAWS

An error occurred (UnauthorizedOperation): You are not authorized to perform this operation. Encoded authorization failure message: ...

The IAM identity is missing an EC2 (or related) permission. The encoded message tells you exactly which action and resource were…