Update index.mdx
While trying to get packer to: 1. Assume a role 2. use `auto` price for spot instances 2. Assign an instance profile to the provisioned instance, I hit this error: ``` The provided credentials do not have permission to create the service-linked role for EC2 Spot Instances. ``` Adding the `iam:CreateServiceLinkedRole` entitlement to the role that packer assumes was all I needed to do.
This commit is contained in:
@@ -257,6 +257,17 @@ work, but specifics will depend on your use-case.
|
||||
}
|
||||
```
|
||||
|
||||
If using an existing instance profile with spot instances/spot pricing, the `iam:CreateServiceLinkedRole` action is also required:
|
||||
|
||||
```json
|
||||
{
|
||||
"Sid": "PackerIAMPassRole",
|
||||
"Effect": "Allow",
|
||||
"Action": ["iam:PassRole", "iam:GetInstanceProfile", "iam:CreateServiceLinkedRole"],
|
||||
"Resource": ["*"]
|
||||
}
|
||||
```
|
||||
|
||||
In case when you're creating a temporary instance profile you will require to have following
|
||||
IAM policies.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user