1111321 - Unable to Install SSL cert into ELB due to AWS account restrictions

Status: VERIFIED FIXED

(Infrastructure & Operations :: Infrastructure: Other, task)

Description

[Josh Mize [:jgmize]]

I was attempting to install the SSL cert generated for bug 1109834 into an AWS ELB using the credentials created in bug 1091235, but I got the following error:

Error fetching certificates
User: arn:aws:iam::342958218804:user/masterfirefoxos is not authorized to perform: iam:ListServerCertificates on resource: arn:aws:iam::342958218804:server-certificate/

Can we get permissions necessary to install SSL certs added to the account?

Comment 1

[Ben (:bensternthal)]

Gozer - can you comment on this. The bug blocks completion of our dev environ and additional coding.

Thanks!

Comment 2

[Philippe M. Chiasson (:gozer)]

Added AmazonEC2FullAccess permissions to you account, you should be good to go.

Comment 3

[Josh Mize [:jgmize]]

Thanks :gozer, but I'm still getting the same error message; can you add the ListServerCertificates permission mentioned in comment #0 and whatever is needed to add them as well?

Comment 4

[Philippe M. Chiasson (:gozer)]

IAM is a complex beast, should be working now, can you please verify? I've run it through the policy simulator, and looks good.

Comment 5

[Josh Mize [:jgmize]]

Thanks :gozer, I was able to install the cert into the ELB after your latest changes.