Required Capabilities Cloudformation Template

0

I am getting an exception when Deploying a cloud formation template regarding Requires capabilities : [CAPABILITY_IAM].

I have done some research and found out that when using IAM resources in the template we have to explicitly tell AWS that we are aware of IAM resources in the template.

I have done that. Below is my command

$ ./update.sh ScalableAppCore AppServers.yml AppParameterCore.json --capabilities CAPABILITY_IAM

$ ./update.sh ScalableAppCore AppServers.yml AppParameterCore.json --capabilities CAPABILITY_IAM CAPABILITY_NAMED_IAM

$ ./create.sh ScalableAppCore AppServers.yml AppParameterCore.json --capabilities CAPABILITY_IAM CAPABILITY_NAMED_IAM CAPABILITY_AUTO_EXPAND

Tried all 3 commands but still, the output shows:
An error occurred (InsufficientCapabilitiesException) when calling the UpdateStack operation: Requires capabilities : [CAPABILITY_IAM]

Here is the actual code :

This is the Role I have created for S3

IamS3Role:
    Type: AWS::IAM::Role
    Properties:
      ManagedPolicyArns:
        - "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - ec2.amazonaws.com
            Action:
              - 'sts:AssumeRole'
      Path: /

Instance Profile attachment

ProfileWithRolesForApp:
    Type: AWS::IAM::InstanceProfile
    Properties:
      Path: "/"
      Roles:
        - !Ref IamS3Role
  

Please let me know where I am wrong . Thanks in advance

2 個答案
0
已接受的答案

There was a mistake in my update.sh script. All resolved now

Ashish
已回答 2 年前
0

Hi. I think the problem is not at Cloudformation, it causes by your credential. Should you check whether the credential is authoried to do UpdateStack action at the target resource?

已回答 2 年前
  • Yes, it has. My user is admin and I am working on this stack for a long time. Now I have IAM resource to deploy

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南