More AWS org policies - Githubissues

ttimbers commented 4 years ago

@Lourenzutti - can you please help me setup the course workflow AWS permissions (specifically user named Hossam in our org) to be able to create new security groups? Thanks!

Lourenzutti commented 4 years ago

can he try now?

ttimbers commented 4 years ago

(not critical, we can table this for now).

ttimbers commented 4 years ago

@Lourenzutti - @hsmohammed still cannot create instances, nor can he add EFS to existing instances. Can you please help with this? (@hsmohammed - if I misrepresented your issues, please clarify here).

Lourenzutti commented 4 years ago

ok, weird! He does have access to create instances. This is weird. I might need to check with him.

Reminding that he can only create the following types:

"t2.micro",
"t2.small",
"m4.xlarge",
"m4.2xlarge"

Also, hopefully he will be able to handle EFS now.

hsmohammed commented 4 years ago

Hi @Lourenzutti,

This is the message I receive when I try to launche any EC2 instance (this was t2.micro). You are not authorized to perform this operation. Encoded authorization failure message: enTxhmyqTh5QWCCAQ08xi0LHuxCuer0SkAeP_VQlO-sPK1v0hpUKqDSDZYVRrbVKedv33HwTOH_2Qkmbq9riBgjhfeKQH3mxOr9DFysMYPiPM00683V-5l3-6If4bO17xW7qtB5DNke-2muyrodNKXegF___BprJvjy-QpWUnacjLcDsdo0iIYT7RJ7bqK2azIL_A3YvMl6TS5x-HEqR2snmuamfzzKrHhKwmLQ7sl7-HAlj1ETaKI83ziiqqybtOsSiPW_e55U55bGCHMUtP910UgxloqRJfES_wK9qFio_hTv97bpnEeeEUOSImOQjKh-O_3Dl-EZfAl4VNMkyILmDJSmx3BZfRcx-RG567caxuIZFVA6Y3qfRGwhZxaib5X1CqaJ4q1RVNBPu3z74yDXUxpRgWUyby9Zkn4vQnD2U3fO_xfElD-LvWjYEvOU3wBCLn8Agtph7y8QOnJ5_AbIEL3JpRHk6Xdqhjc4a51VXlrWAKryt3cRWIcKpjU5xEaCzprFB35COa8tmETArQgICBE9vhi-uF0o7PZQ0e5HJTwF8ve2Bn0jObvEIarh6WjuI8AqFWID7aI12BkVVZ_EUVM0SsMO2NYJI2iMxWnyZ4bQMrEy9_QvSYKTo3731Dh2X5RG0Du48odIMFX7whH1jNOfOfmO2rTXiFPcJUNDUKl5TA4LPvTLKa5mQSEqcyv_Z_A6hrXMEwLqYGnqDVcXL74I-WblSBXTtdzRmpWOQNA

Lourenzutti commented 4 years ago

Hey @hsmohammed let's try to go over this together on Monday, say 11am? Does that work for you?

hsmohammed commented 4 years ago

Yes, I will be available at 11 am today. Thanks

hsmohammed commented 4 years ago

@ttimbers Rodolfo helped me and I can launche instances now. Thanks

hsmohammed commented 4 years ago

Hi @Lourenzutti,

I am trying to create a new volume for the persistent storage task, but I have no permission to do so. I have added the course, workflows tags. Also, I don't have permission to reboot instances.

Thank you!

trevorcampbell commented 2 years ago

This is related to jhub infrastructure. Transferring.

UBC-DSCI / jupyterhub-infrastructure

More AWS org policies #7