Forbidden
Service
cupixworks-worker
Occurrences
218
Status
Reported
Confidence
85%
Actionability
36%
Cluster ID
ae62d269-9dba-4c1e-8767-69f09cdb564b
First Seen
2026-04-09 08:22 UTC
Last Seen
2026-07-30 01:03 UTC
Datadog
SlackActions
Forbidden
What Happened#
매일 01:00 UTC에 실행되는 Cupix::Cron::EditingPermission.revoke_expired_editor_permissions 크론잡이 만료된 편집 권한을 해제하면서, PubSub 이벤트를 통해 notification-service에 recipe 삭제 및 구독 해제 요청을 보내는 과정에서 인증 실패가 발생하고 있다. notification-service의 Lambda authorizer가 사용자의 api_token으로 Tesla API에 인증을 요청하지만 non-200 응답을 받아 API Gateway가 {"message":"Forbidden"}을 반환한다.
Quick Facts#
| Field | Value |
|---|---|
| exception.class | Cupix::NotificationService |
| exception.message | recipe deletion failed: {"message":"Forbidden"} / Forbidden |
| top_frame | lib/cupix/notification_service.rb:65 |
| env | production, us-west-2 |
| deploy | production-us-west-2-2026052*T0100Z0-3e770a15-cupixworks |
Timeline#
- 2026-04-09 08:22 UTC — 최초 에러 발생
- 2026-05-23 01:01-01:04 UTC — 일별 burst 확인
- 2026-05-24 01:00-01:03 UTC — 일별 burst 확인 (44건, 11 facilities)
- 2026-05-27 — RCA 분석 수행
Scoring#
Confidence 85% · Actionability 36%
Confidence#
| Dimension | Score | Detail |
|---|---|---|
| Evidence completeness | 5/5 | 12 code refs, 2 log queries |
| Code path explicitness | 3/3 | 12 file:line refs |
| Log evidence | 3/3 | section, query, pattern |
| RCA structure | 3/3 | 3/3 sections |
| Revision history | 0/3 | 0 revision(s) |
| Agent execution | 3/3 | success |
Actionability#
| Dimension | Score | Detail |
|---|---|---|
| Fix complexity | 1/5 | critical |
| Affected files | 1/5 | 17 file(s) |
| Single repo | 1/3 | 2 service(s) |
| Immediate actions | 0/3 | absent |
| Testability | 0/3 | no test info |
| External dependency | 3/3 | no external deps |
| Data migration | 3/3 | no migration |