aws
aws copied to clipboard
Missing "ec2:DescribeTags" permission
The documentation shows a sample policy to be able to create tags. The sample policy is missing the "ec2:DescribeTags" action permission, which is needed in order to use the "aws_resource_tag" resource without having a UnauthorizedOperation error.
By the way, you should update the repository guidelines for contributing, which says "If you would like to contribute, please open a ticket in JIRA", while JIRA says "We've moved issue tracking from JIRA to Github Issues". Very confusing... ;)
Our docs were really out of date when you run into this. If you know exactly what should be added to the docs you can just open a PR against this repo. Since it's just a doc change there's no need for signing the CLA or anything else fancy.
not sure if this was already updated but I see it right after the volumes policy:
For resource tags:
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"ec2:CreateTags",
"ec2:DescribeTags"
],
"Sid": "Stmt1381536708000",
"Resource": [
"*"
],
"Effect": "Allow"
}
]
}