时间戳

首页 > 解决方案 > “jhipster aws”错误：未授权执行：iam:GetInstanceProfile 资源：实例配置文件 aws-elasticbeanstalk-ec2-role

jhipster - “jhipster aws”错误：未授权执行：iam:GetInstanceProfile 资源：实例配置文件 aws-elasticbeanstalk-ec2-role

问题描述

我jhipster aws在我的项目文件夹中运行并回答提示。 

C:\AWSworkspace\jhaws>jhipster aws  
INFO! Using JHipster version installed locally in current project's node_modules  
INFO! Executing jhipster:aws  
INFO! Options: from-cli: true  
? Application name: jhaws   
? Environment name: jhaws-env  
? Name of S3 bucket: jhaws  
? Database name: jhaws  
? Database username: jhawsadmin  
? Database password: [hidden]  
? On which EC2 instance type do you want to deploy? t2.micro  
? On which RDS instance class do you want to deploy? db.t2.micro  
? On which region do you want to deploy? us-east-1  
Building application

这将创建 S3 存储桶、上传 jar、创建数据库并启动数据库，但是当它到达时Verifying ElasticBeanstalk Roles我收到消息：

Verifying ElasticBeanstalk Roles  
Error: User: arn:aws:iam::173874802293:user/progaccess is not authorized to perform: iam:GetInstanceProfile on resource: instance profile aws-elasticbeanstalk-ec2-role  
    at Environment.error (C:\AWSworkspace\jhaws\node_modules\yeoman-environment\lib\environment.js:176:40)  
    at module.exports.error (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\generator-base.js:1448:18)  
    at iam.verifyRoles.err (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\aws\index.js:228:30)  
    at hasInstanceRole.then.then.then.then.then.then.catch.err (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\aws\lib\iam.js:214:13)  
    at process._tickCallback (internal/process/next_tick.js:68:7)

用户 ,从组progaccess中获得其权限。progaccess这些是权限： 

AWSCodeCommitFullAccess  
IAMSelfManageServiceSpecificCredentials  
AWSElasticBeanstalkWebTier  
AWSElasticBeanstalkFullAccess  
AWSElasticBeanstalkMulticontainerDocker  
AmazonRDSDataFullAccess  
AWSElasticBeanstalkWorkerTier

我已经添加了为角色列出的权限，aws-elasticbeanstalk-ec2-role所以我不知道我缺少哪些权限。谢谢。

标签： jhipster

解决方案

您需要为用户添加权限 IAM : GetInstanceProfile。记录在案的 AWSElasticBeanstalkFullAccess 策略是不够的

推荐阅读