Missing permission for eb create elastic beanstalk

Question

Hi, I am attempting to create an elastic beanstalk environment with eb client. When i type eb created it give me:
NotAuthorizedError - Operation Denied. Access Denied

But the profile that I am using have the permissions:
* AdministratorAccess - ElasticBeanstalk
* AmazonEC2FullAccess
* AmazonRDSFullAccess
* AWSElasticBeanStalkWebTier
* AWSElasticBeanStalkWorkerTier
* IAMUserChangePassword

Also, i am correctly logged in with aws sso login --profile my-profile-name.

I don't know what permission is missing, thank you for help.

Answer

Hi,

According to the following [GitHub issue](https://github.com/aws/aws-elastic-beanstalk-cli/issues/68), if the size of your source code exceeds 7 megabytes you require the ListBucketMultipartUploads permission on the [elasticbeanstalk S3 bucket](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.S3.html), which is not included on the [AdministratorAccess-AWSElasticBeanstalk policy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AdministratorAccess-AWSElasticBeanstalk.html). Can you try adding it to see if it solves the problem?

>AdministratorAccess-AWSElasticBeanstalk policy gives the user a full permission to create, modify and delete EB applications, environments etc. If your source code file size is greater than 7mb, EB CLI upload your source code in multiple parts to take advantage of S3’s multipart uploads. EB CLI make a call to ListBucketMultipartUploads operation on behalf of customer, and this operation is not included in AdministratorAccess-AWSElasticBeanstalk policy, as this policy is designed to support the opeartions required for EB service.

Missing permission for eb create elastic beanstalk

関連するコンテンツ