Reputation:
I as an admin have created several Elastic Beanstalk applications in AWS.
Now I want to give some of my team members access to login into AWS and view EBS logs - I mean read-only access. I don't want them to be able to update or deploy or crate new Elastic Beanstalk application.
If I give them AWSElasticBeanstalkReadOnlyAccess
the user is unable to see anything in Elastic Beanstalk.
Upvotes: 0
Views: 2689
Reputation:
The mistake I was doing is the region of two users were different. Admin user configured the cloud watch logs in region N. Virginia for support user. When support user was login the default region was Ohio and support user was unable to see logs. After selecting N. Virginia region for support the support user can see logs.
Upvotes: 0
Reputation: 780
Look at the section Enabling Read-Only Access to Elastic Beanstalk Logs on this page - https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/AWSHowTo.iam.managed-policies.html
Upvotes: 1