#9468 AWS: please allow terminate instances for me and for token, that I have created
Closed: Fixed 4 years ago by kevin. Opened 4 years ago by astepano.

aws sts get-caller-identity                                                                                             

{
    "UserId": "AIDAR2OOCKQW5VBCTDBGN",
    "Account": "125523088429",
    "Arn": "arn:aws:iam::125523088429:user/fedora-ci-osci"
}
aws ec2 terminate-instances --instance-ids i-09674e197255b811b                    

An error occurred (UnauthorizedOperation) when calling the TerminateInstances operation: You are not authorized to perform this operation. Encoded authorization failure message: BoV

The same for web-ui for my login with Federated Login: aws-fedora-ci/astepano

Screenshot_from_2020-11-16_17-04-10.png


I am trying to remove instances that I have created.

Metadata Update from @smooge:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: aws, medium-gain, medium-trouble, ops

4 years ago

According to the policy for that user the FedoraGroup tag should be set to ci it was set to aws-fedora-ci I have now changed it.

Could you try delete it again and let us know please.

@mobrien thank you! It works now.
If I set FedoraGroup == ci I can remove instance.
Thank you! Ticket can be closed.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

4 years ago

Log in to comment on this ticket.

Metadata
Boards 1
ops Status: Done
Attachments 1