Status check failed for system

0

I have 3 EBS application that work fine (.Net on Linux). However, the visible status in the Console always is "Unknown" o "No Data".

I've cheched EC2 system logs and found this error:

Sending signal 0 to CFN wait condition https://cloudformation-waitcondition-eu-west-1....
Error signaling CloudFormation: [Errno 403] HTTP Error 403 : Access Denied
Wait Condition Signal expired.

EC2 console also says: "Status check failed for system", "Status check failed for instance" and "Status check failed for attached EBS"

I've checked "daemon.log". It says:

sending message(s) failed (attempt 18): (Aws::Healthd::Errors::AccessDeniedException) 
User: arn:aws:sts::6645664***:assumed-role/aws-elasticbeanstalk-ec2-role/i-06af60ea9a5a9**** is not 
authorized to perform: elasticbeanstalk:PutInstanceStatistics on resource: 
arn:aws:elasticbeanstalk:eu-west-1:66456648****:application/C******. 
Backing off by 200 seconds in addition to delay interval

Why? What is going on? What else do I have to check?

1 Answer
3
Accepted Answer

To resolve this issue, you should update the IAM role (aws-elasticbeanstalk-ec2-role) to include the necessary permissions. You can do this by attaching a policy that grants the elasticbeanstalk:PutInstanceStatistics permission for the required resources

profile picture
Jagan
answered 3 months ago
profile picture
EXPERT
reviewed a month ago
  • What policy grants the elasticbeanstalk:PutInstanceStatistics permission? Do I have to create one?

    I've created a "custom" CustomAWSElasticBeanstalkPutInstanceStatistics policy, and it works!

    {
    	"Version": "2012-10-17",
    	"Statement": [
    		{
    			"Sid": "ElasticBeanstalkHealthAccess",
    			"Action": [
    				"elasticbeanstalk:PutInstanceStatistics"
    			],
    			"Effect": "Allow",
    			"Resource": [
    				"arn:aws:elasticbeanstalk:*:*:application/*",
    				"arn:aws:elasticbeanstalk:*:*:environment/*"
    			]
    		}
    	]
    }
    

    Is this the correct way?

    Custom policy

    2/3 working

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions