Quicksight Aurora access, VPC issue

Question

I have followed the docs to enable connecting QuickSight to an Aurora psql instance but I can't get it to work.

When I try add the VPC from QuickSight I see the following error in the chrome dev console (no visible error on the page itself..)

![No access](/media/postImages/original/IMm-84geMcTFKHm-anFz7H1Q)

I.e. it says "Not autorized to perform ec2:CreateNetworkInterface"

I have done the following

- Checked that my user has `ec2:CreateNetworkInterface` and `quicksight:CreateVPCConnection`
 - Checked that the `aws-quicksight-service-role-v0` also has these two permissions 
 - Checked that the role has `sts:AssumeRole`
 - Check the VPC, security groups etc. Though its unlikely its any of that since the failure happens as I'm trying to add the VPC to QuickSight

Do you have any idea where I can look next? The UX for this from QS is not great.

Thanks

Answer

Thanks I tried explicitly adding the two I did not have (ec2:CreateNetworkInterface was already there) to both the role and my user. But I get the same error.

It is specifically saying ec2:CreateNetworkInterface which I know is there, so that is odd. I've confirmed its using the correct role.

Most frustrating

Answer

Try to operate with the following permissions set for IAM users and IAM roles

```
ec2:CreateNetworkInterface
ec2:DescribeNetworkInterfaces
ec2:DeleteNetworkInterface
```

Quicksight Aurora access, VPC issue

相關內容