aws-solutions / instance-scheduler-on-aws

A cross-account and cross-region solution that allows customers to automatically start and stop EC2 and RDS Instances
https://aws.amazon.com/solutions/implementations/instance-scheduler-on-aws/
Apache License 2.0
553 stars 273 forks source link

Can't start instance without correct KMS permissions #504

Closed ricardocaronasousa closed 10 months ago

ricardocaronasousa commented 10 months ago

Describe the bug With specific instances that use custom KMS keys, it isn't possible to start them via schedules due to lack of KMS permissions for those keys.

To Reproduce Try to schedule an instance whose volumes are encrypted with custom KMS keys.

Expected behavior The scheduler should be able to run for them, so the CloudFormation stack should have the possibility to add custom permissions to the Scheduler Role.

Please complete the following information about the solution:

Screenshots N/A

Additional context Solution found in: https://repost.aws/questions/QUOtvWgsUGQPW7xWOHDSosLQ/aws-instance-scheduler-not-working

hearde commented 10 months ago

Please review the guidance in the IG here. We will need to solve this for spoke accounts as well. I am open to suggestions.

Duplicate of #332 .