Cloudfront Invalidations don't work
Whenever I want to release to prod, it fails:
Traceback (most recent call last):
File "./deploy.py", line 194, in <module>
main()
File "./deploy.py", line 190, in main
actions[args.action](args, config)
File "./deploy.py", line 149, in full_deploy
"CallerReference": str(time.time())
File "/usr/local/var/pyenv/versions/3.6.5/lib/python3.6/site-packages/botocore/client.py", line 314, in _api_call
return self._make_api_call(operation_name, kwargs)
File "/usr/local/var/pyenv/versions/3.6.5/lib/python3.6/site-packages/botocore/client.py", line 612, in _make_api_call
raise error_class(parsed_response, operation_name)
botocore.errorfactory.AccessDenied: An error occurred (AccessDenied) when calling the CreateInvalidation operation: User: ...web is not authorized to perform: cloudfront:CreateInvalidation
It's not very critical, but it would be nice to sort out.