You are not authorized to perform this operation

0

An error message appears when I use the sandbox environment to create the second step of Auto scaling The error message is as follows: The launch template specified in step 1 is invalid: You are not authorized to perform this operation

Bao
asked 5 months ago360 views
2 Answers
1

Hello,

It sounds like you may be encountering an IAM permissions issue when trying to create the second-step scaling configuration for your Auto Scaling group. Application Auto Scaling and EC2 Auto Scaling require specific IAM permissions to create and manage scaling configurations and resources.

A few things to check:

  • Make sure the IAM user or role you are using to create the scaling configuration has the necessary permissions. For Application Auto Scaling, you'll need application-autoscaling: CreateScalingPlan and application-autoscaling: UpdateScalingPlan permissions at minimum. For EC2 Auto Scaling, ec2:CreateAutoScalingGroup and ec2:UpdateAutoScalingGroup are required.
  • Confirm the IAM entity has permission to access the launch template referenced in the first scaling step. It needs ec2:DescribeLaunchTemplates permission.
  • If using a service-linked role, ensure it has been created by successfully configuring scaling for the resource type previously.
  • You can test with full admin permissions temporarily to validate it's a permissions issue.

For more info - https://docs.aws.amazon.com/solutions/latest/aws-innovation-sandbox/security.html https://docs.aws.amazon.com/autoscaling/application/userguide/security_iam_troubleshoot.html

Thanks

Abhinav

answered 5 months ago
0

When creating an AutoScaling Group (ASG), your user or role must have permissions to create the instance which the ASG is configured to launch. This is to prevent an ASG being used for a permissions escalation attack.

One common permission missing is IAM:PassRole, which is needed if an EC2 Instance Role is included in the launch template. More information: https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-launch-template-permissions.html

AWS
answered 5 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content