Are you showing the credentials of the role you are using to create the EC2 instance or those of the role the new EC2 instance will be?
On Wed, Jun 25, 2014 at 2:42 AM, Faisal Ali Rabbani <[email protected]> wrote: > I am trying to create EC2 instance via ansible using IAM roles but I while > launching new instance I get error > > failed: [localhost] => (item= IAMRole-1) => {"failed": true, "item": " > IAMRole-1"} > msg: Instance creation failed => UnauthorizedOperation: You are not > authorized to perform > this operation. Encoded authorization failure message: > Ckcjt2GD81D5dlF6XakTSDypnwrgeQb0k > ouRMKh3Ol1jue553EZ7OXPt6fk1Q1-4HM-tLNPCkiX7ZgJWXYGSjHg2xP1A9LR7KBiXYeCtFKEQIC > W9cot3KAKPVcNXkHLrhREMfiT5KYEtrsA2A-xFCdvqwM2hNTNf7Y6VGe0Z48EDIyO5p5DxdNFsaSChUcb > iRUhSyRXIGWr_ZKkGM9GoyoVWCBk3Ni2Td7zkZ1EfAIeRJobiOnYXKE6Q > > whereas iam role has full ec2 access, with following policy > > { > "Version": "2012-10-17", > "Statement": [ > { > "Action": "ec2:*", > "Effect": "Allow", > "Resource": "*" > }, > { > "Effect": "Allow", > "Action": "elasticloadbalancing:*", > "Resource": "*" > }, > { > "Effect": "Allow", > "Action": "cloudwatch:*", > "Resource": "*" > }, > { > "Effect": "Allow", > "Action": "autoscaling:*", > "Resource": "*" > } > ] > } > > Any suggestions please. > > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/2f8870b4-f57b-4cf9-925b-03f56636df12%40googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAJQqANeOq2nTtVMWpXG8EV3-9Qcpcqby9waUQMmiy5tdGMCjtw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
