AWS UnauthorizedOperation

[jrowinski88]

Hi,

Been using Teevity and moved over to using a dockerized container. Currently I'm having an issue with any AWS calls it seems but having a hard time tracking down which one exactly.

Any chance anyone could help out here?

| Error 2020-01-07 21:45:30,727 [localhost-startStop-1] ERROR BootStrap  - Startup failed
Message: You are not authorized to perform this operation. (Service: AmazonEC2; Status Code: 403; Error Code: UnauthorizedOperation; Request ID: 14ad917d-6d91-4dd9-9bd8-d436503fa9d8)
     Line | Method
->>  1712 | handleErrorResponse              in com.amazonaws.http.AmazonHttpClient$RequestExecutor
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|    1367 | executeOneRequest                in     ''
|    1113 | executeHelper . . . . . . . . .  in     ''
|     770 | doExecute                        in     ''
|     744 | executeWithTimer . . . . . . . . in     ''
|     726 | execute                          in     ''
|     686 | access$500 . . . . . . . . . . . in     ''
|     668 | execute                          in com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl
|     532 | execute . . . . . . . . . . . .  in com.amazonaws.http.AmazonHttpClient
|     512 | execute                          in     ''
|   22420 | doInvoke . . . . . . . . . . . . in com.amazonaws.services.ec2.AmazonEC2Client
|   22387 | invoke                           in     ''
|   22376 | invoke . . . . . . . . . . . . . in     ''
|   11690 | executeDescribeRegions           in     ''
|   11661 | describeRegions . . . . . . . .  in     ''
|   11702 | describeRegions                  in     ''
|     296 | initZones . . . . . . . . . . .  in com.netflix.ice.processor.ProcessorConfig
|     119 | <init>                           in     ''
|     190 | doCall . . . . . . . . . . . . . in BootStrap$_closure1
|     327 | evaluateEnvironmentSpecificBlock in grails.util.Environment
|     320 | executeForEnvironment . . . . .  in     ''
|     296 | executeForCurrentEnvironment     in     ''
|     266 | run . . . . . . . . . . . . . .  in java.util.concurrent.FutureTask
|    1149 | runWorker                        in java.util.concurrent.ThreadPoolExecutor
|     624 | run . . . . . . . . . . . . . .  in java.util.concurrent.ThreadPoolExecutor$Worker
^     748 | run                              in java.lang.Thread```

[nfonrose]

Hi,

We need a bit more info in order to be able to help you:

• Where are you running this container? On a local machine? On an EC2 instance? Somewhere else (Fargate, ...)?
• Which mechanism are you using to provide AWS rights to your container ( AWS AK/SK in the properties file, IAM Role, ...)?

And finally, you mentioned you have been using Teevity/Ice already. In that previous setup, how were you providing the credentials?

Thanks!

Nicolas

-- Nicolas Fonrose | Teevity | Founder +33.6.61.35.43.31 https://teevity.com - Cloud Costs Analytics for AWS, GCP and Azure powered by NetflixOSS Ice twitter - @nfonrose / @teevity

On Tue, Jan 7, 2020 at 11:10 PM Boojs [email protected] wrote:

Hi,

Been using Teevity and moved over to using a dockerized container. Currently I'm having an issue with any AWS calls it seems but having a hard time tracking down which one exactly.

Any chance anyone could help out here?

`| Error 2020-01-07 21:45:30,727 [localhost-startStop-1] ERROR BootStrap - Startup failed Message: You are not authorized to perform this operation. (Service: AmazonEC2; Status Code: 403; Error Code: UnauthorizedOperation; Request ID: 14ad917d-6d91-4dd9-9bd8-d436503fa9d8) Line | Method ->> 1712 | handleErrorResponse in com.amazonaws.http.AmazonHttpClient$RequestExecutor

| 1367 | executeOneRequest in '' | 1113 | executeHelper . . . . . . . . . in '' | 770 | doExecute in '' | 744 | executeWithTimer . . . . . . . . in '' | 726 | execute in '' | 686 | access$500 . . . . . . . . . . . in '' | 668 | execute in com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl | 532 | execute . . . . . . . . . . . . in com.amazonaws.http.AmazonHttpClient | 512 | execute in '' | 22420 | doInvoke . . . . . . . . . . . . in com.amazonaws.services.ec2.AmazonEC2Client | 22387 | invoke in '' | 22376 | invoke . . . . . . . . . . . . . in '' | 11690 | executeDescribeRegions in '' | 11661 | describeRegions . . . . . . . . in '' | 11702 | describeRegions in '' | 296 | initZones . . . . . . . . . . . in com.netflix.ice.processor.ProcessorConfig | 119 | in '' | 190 | doCall . . . . . . . . . . . . . in BootStrap$_closure1 | 327 | evaluateEnvironmentSpecificBlock in grails.util.Environment | 320 | executeForEnvironment . . . . . in '' | 296 | executeForCurrentEnvironment in '' | 266 | run . . . . . . . . . . . . . . in java.util.concurrent.FutureTask | 1149 | runWorker in java.util.concurrent.ThreadPoolExecutor | 624 | run . . . . . . . . . . . . . . in java.util.concurrent.ThreadPoolExecutor$Worker ^ 748 | run in java.lang.Thread `

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jonbrouse/docker-ice/issues/45?email_source=notifications&email_token=AAAJJJMQZAXZ3KLMSVKGLMLQ4T4W3A5CNFSM4KD7ZFEKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IETO24Q, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAJJJIHX4RXWLCTJFQ5723Q4T4W3ANCNFSM4KD7ZFEA .