Aws Sdk Java - ReleaseAddress API response issue

Question

We are using AWS java sdk 2. When we are trying to delete an elastic IP address that is mapped with a nat gateway, we are getting an authFailure error code instead of an inUse error code. 
For other resources, if we try delete a resource that is already in use, we are getting the inUse error code but releaseAddress is **not** returning the inUse error code.

Am I missing something or it is an issue on AWS API side?

Answer

Generally speaking, AuthFailure would relate to the IAM permissions, or could be related to an SCP policy applied to your account. This would be checked before anything else.

If you are having success deleting other addresses, then this may be due to tag based policies, for example.

[1] https://docs.aws.amazon.com/AWSEC2/latest/APIReference/errors-overview.html#CommonErrors : Error codes for the Amazon EC2 API - Common client error codes
[2] https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html : Controlling access to and for IAM users and roles using tags

Aws Sdk Java - ReleaseAddress API response issue

Relevant content