CODEWITHSUNDEEP
amazon-web-servicesamazon-emraws-policies
Eric
Eric

Reputation: 303

Access Denied. Not Authorized to perform : ec2: DescribeSubnets

When create an EMR cluster, got this error enter image description here

The user has the ec2: DescribeSubnets permission in a policy as below. What would be root cause?

{
        “Sid”: “AllowOperateClusters”,
        “Effect”: “Allow”,
        “Action”: [
            “elasticmapreduce:RunJobFlow”,
            “elasticmapreduce:DescribeCluster”,
            “elasticmapreduce:ListClusters”,
            “elasticmapreduce:ListBootstrapActions”,
            “elasticmapreduce:ListSteps”,
            “elasticmapreduce:ListInstanceGroups”,
            “elasticmapreduce:OpenEditorInConsole”,
            “elasticmapreduce:ListEditors”,
            “ec2:DescribeAccountAttributes”,
            “ec2:DescribeVpcs”,
            “ec2:DescribeAvailabilityZones”,
            “ec2:DescribeSubnets”
        ],
        “Resource”: “*”
    }

Upvotes: 0

Views: 4853

Answers (1)

Eric
Eric

Reputation: 303

It works after granting the below permissions.

ec2:DescribeNetworkAcls
ec2:DescribeRouteTables

Upvotes: 1

Related Questions