Why do I get an undefined resource RunnerDeprovision when deploying the AWS CloudFormation stack?

Last updated: February 6, 2026

QUESTION

Why do I get an undefined resource RunnerDeprovision when deploying the AWS CloudFormation stack?

ANSWER

You probably built a Nuon app from scratch, and are missing the permissions directory with the TOML files defining the runner's IAM roles and permissions.

deprovision.toml
deprovision_boundary.json
maintenance.toml
maintenance_boundary.json
maintenance_policy.json
provision.toml
provision_boundary.json

Copy the permissions directory from one of Nuon's sample apps.

Nuon provides these IAM roles as examples and you and your customers should define the required permissions for your app. In general, provision and deprovision need the highest permissions to create and destroy cloud resources. Maintenance and break glass roles can be scoped accordingly.

A best practice is to copy an existing sample app and tweak values. Alternatively, point your coding agent to the sample apps repo and instruct it to build an app based on the example apps with types of components and infrastructure needd.

DOCS