SAM Doctor — deployment diagnostics
Jul 2026 — ongoingA local command-line tool that turns AWS SAM, CloudFormation, IAM, and GitHub Actions failure output into a readable diagnosis. It came out of my own SAM deployments at Pricing Empowered, where the error a pipeline prints names the symptom and the cause is scattered across templates, build logs, and CloudFormation events nobody wants to read at 2am.
The rule it holds to: every diagnosis cites the evidence it came from. It reads the text you hand it, detects known failure patterns, redacts account IDs and ARNs locally, and gives verification steps plus the relevant official docs. It does not touch AWS, upload anything, or claim an authoritative root cause.
Covers OIDC failures (missing id-token: write, audience mismatch, trust-policy subject mismatch), IAM AccessDenied, CloudFormation rollback states, SAM config errors, and API Gateway CORS preflight conflicts.