I tried to run certbot-s3front today with the following script and using an IAM account with the policy described in certbot-s3front/sample-aws-policy.json.
ClientError: An error occurred (AccessDenied) when calling the ListServerCertificates operation: User: arn:aws:iam::<id>:user/certbot is not authorized to perform: iam:ListServerCertificates on resource: arn:aws:iam::<id>:server-certificate/cloudfront/letsencrypt/
Easy enough, as the error pointed out, all I needed to do to fix the problem was to add the iam:ListServerCertificates action to the list of allowed actions in the user's policy file.
All that needs doing is adding that extra permission to the file which I've done in this PR.
I tried to run certbot-s3front today with the following script and using an IAM account with the policy described in
certbot-s3front/sample-aws-policy.json
.However I got the following error:
Easy enough, as the error pointed out, all I needed to do to fix the problem was to add the
iam:ListServerCertificates
action to the list of allowed actions in the user's policy file.All that needs doing is adding that extra permission to the file which I've done in this PR.