AWS-StartEC2Instance timeout

0

It appears that the AWS-StartEC2Instance Automation does not work.
I have a Maintenance Window with a Task targeting an instance by ID. When the MW executes, it fails with the following error:
Automation Step Execution fails when it is verifying the instance(s) have reached desired state.
Get Exception from DescribeInstanceStatus API of ec2 Service.
Exception Message from DescribeInstanceStatus API:
Request has expired. (Service: AmazonEC2; Status Code: 400; Error Code: RequestExpired; Request ID: a6647f3c-f218-451c-adb8-8a670236c1c0).
Please refer to Automation Service Troubleshooting Guide for more diagnosis details.
I have specified a role configured according to https://docs.aws.amazon.com/systems-manager/latest/userguide/automation-walk-security-assume.html.
Note that the AWS-StopEC2Instance does execute without error.
Has anyone out there had success using this Automation?

질문됨 5년 전573회 조회
1개 답변
0

After splunking through the CloudTrail logs, I was able to determine that the problem was related to our use of encrypted EBS volumes (encrypted with our own KMS key). I needed to grant kms:CreateGrant to the role that is executing the automation

답변함 5년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠