sigdba / sig-shared-sceptre

Shared templates for Sceptre/CloudFormation
2 stars 0 forks source link

Document ELB Log Bucket Policy #95

Closed dboitnot closed 1 year ago

dboitnot commented 1 year ago

When you enable logging to an existing bucket on an ELB you might get this error:

LoadBalancer AWS::ElasticLoadBalancingV2::LoadBalancer UPDATE_FAILED Access Denied for bucket: xula-elb-logs. Please check S3bucket permission (Service: AmazonElasticLoadBalancing; Status Code: 400; Error Code: InvalidConfigurationRequest; Request ID: 3250c0d6-e9c8-4b7b-bca1-ca407fd0bcb4; Proxy: null)

This is caused by not having the appropriate policy on the bucket:

https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/enable-access-logs.html#attach-bucket-policy

Add a note to the documentation about this.

dboitnot commented 1 year ago

Available in release 103.