By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Status check failed for system

0

I have 3 EBS application that work fine (.Net on Linux). However, the visible status in the Console always is "Unknown" o "No Data".

I've cheched EC2 system logs and found this error:

Sending signal 0 to CFN wait condition https://cloudformation-waitcondition-eu-west-1....
Error signaling CloudFormation: [Errno 403] HTTP Error 403 : Access Denied
Wait Condition Signal expired.

EC2 console also says: "Status check failed for system", "Status check failed for instance" and "Status check failed for attached EBS"

I've checked "daemon.log". It says:

sending message(s) failed (attempt 18): (Aws::Healthd::Errors::AccessDeniedException) 
User: arn:aws:sts::6645664***:assumed-role/aws-elasticbeanstalk-ec2-role/i-06af60ea9a5a9**** is not 
authorized to perform: elasticbeanstalk:PutInstanceStatistics on resource: 
arn:aws:elasticbeanstalk:eu-west-1:66456648****:application/C******. 
Backing off by 200 seconds in addition to delay interval

Why? What is going on? What else do I have to check?

Topics
Management & GovernanceComputeSecurity, Identity, & Compliance
Tags
AWS HealthAmazon EC2IAM Policies
Language
English
Pablo
asked 8 months ago591 views
1 Answer
3
Accepted Answer

To resolve this issue, you should update the IAM role (aws-elasticbeanstalk-ec2-role) to include the necessary permissions. You can do this by attaching a policy that grants the elasticbeanstalk:PutInstanceStatistics permission for the required resources

profile picture
Jagan
answered 8 months ago
profile picture
EXPERT
Oleksii Bebych
reviewed 6 months ago
  • Pablo
    8 months ago

    What policy grants the elasticbeanstalk:PutInstanceStatistics permission? Do I have to create one?

    I've created a "custom" CustomAWSElasticBeanstalkPutInstanceStatistics policy, and it works!

    {
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "ElasticBeanstalkHealthAccess",
			"Action": [
				"elasticbeanstalk:PutInstanceStatistics"
			],
			"Effect": "Allow",
			"Resource": [
				"arn:aws:elasticbeanstalk:*:*:application/*",
				"arn:aws:elasticbeanstalk:*:*:environment/*"
			]
		}
	]
}

    Is this the correct way?

    Custom policy

    2/3 working

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content