Cloud Operations on AWS - Lab 6 - Capstone

Common Causes (Specific to the Final Challenge)

1. Incorrect Region

Unlike guided labs, the final challenge often omits certain steps, making it easy to overlook the required region. Ensure you are working in the region specified for the lab.

2. Rule name outside the scope

Lab IAM policies are sometimes scoped by name (e.g., rule/lab-*). Ensure you are using the exact name specified in the challenge instructions, character for character.

3. Incomplete preceding steps

The final challenge often relies on resources or configurations created in earlier steps; missing these can lead to permission errors in subsequent tasks.

4. Lab environment provisioning issues

Sometimes, ending the current lab session and starting a new one resolves the issue. However, since this may result in the loss of progress made up to the final challenge, try other troubleshooting steps first.

Commands to check permissions

# Check the current role
aws sts get-caller-identity

# Check policies attached to the role
aws iam list-attached-role-policies --role-name <role-name>
aws iam get-role-policy --role-name <role-name> --policy-name <policy-name>

This allows you to determine whether events:PutRule is explicitly denied or if it is subject to specific conditions.