[Documentation] What permissions does the charm need in AWS?
Bug #2003800 reported by
Adam Dyess
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AWS Integrator Charm |
New
|
Undecided
|
Unassigned |
Bug Description
The aws-integrator charms makes attempts to create/modify elements within a users AWS Cloud, but many errors can occur when the token provided to the charm doesn't have the permissions necessary to enact the change in the cloud.
Can the charm docs offer guidance to which permissions are necessary so the charm can perform its duty?
To post a comment you must log in.
token permissions require AmazonEC2FullAccess plus the following.
{
"Effect" : "Allow",
"Action" : [
"iam: AttachRolePolic y",
"iam: CreateRole" ,
"iam: PassRole" ,
"iam: CreatePolicy" ,
"iam: PutRolePolicy" ,
"iam: CreateInstanceP rofile" ,
"iam: AddRoleToInstan ceProfile"
"Resource" : "*"
"Version": "2012-10-17",
"Statement": [
{
],
}
]