search

aliyun / terraform-provider-alicloud

Terraform AliCloud provider
https://www.terraform.io/docs/providers/alicloud/
Mozilla Public License 2.0
590 stars 553 forks source link

can not delete ess related resource #2789

Open clouda3 opened 4 years ago

clouda3 commented 4 years ago

Hi there,

Terraform Version

Terraform v0.13.1

Affected Resource(s)

Terraform Configuration Files

I already successfully created ess resources including :ecs/slb/vpc/ess configuation

Actual Behavior

When I run terraform destroy,I can not delete related resources: I already assign :AliyunEssFullacess to user

output: alicloud_ess_scaling_configuration.scaling-config-1: Destroying... [id=asc-t4n54scz10mucl1n86m3]

Error: [ERROR] terraform-provider-alicloud/alicloud/resource_alicloud_ess_scalingconfiguration.go:714: Resource asc-t4n54scz10mucl1n86m3 DeleteScalingGroup Failed!!! [SDK alibaba-cloud-sdk-go ERROR]: SDK.ServerError ErrorCode: UserNotAuthorizeEss Recommend: https://error-center.aliyun.com/status/search?Keyword=UserNotAuthorizeEss&source=PopGw RequestId: 0EF8F5E3-509B-407D-B6E6-29006FB964C5 Message: Ess should be authorized in ram to operate user resource.

clouda3 commented 4 years ago

I manually created a role:AliyunESSDefaultRole with 4 permissions:AliyunSLBFullAccess/AliyunSLBReadOnlyAccess/AliyunESSFullAccess/AliyunESSReadOnlyAccess this fixed !! I think this is bug .without this AliyunESSDefaultRole. I can never delete ess related resources

chushenmeshile commented 4 years ago

I think it is ok, some resource need permission to operate