Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

You do not have the required role to enable Auto Scaling

I am seeing this alert when trying to create a table. I've added the AmazonDynamoDBFullAccess policy to my IAM user as per these instructions.

I've signed out/in, but still get this message. Is there an additional policy I need to enable autoscaling in DynamoDB?

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "dynamodb:*",
                "dax:*",
                "application-autoscaling:DeleteScalingPolicy",
                "application-autoscaling:DeregisterScalableTarget",
                "application-autoscaling:DescribeScalableTargets",
                "application-autoscaling:DescribeScalingActivities",
                "application-autoscaling:DescribeScalingPolicies",
                "application-autoscaling:PutScalingPolicy",
                "application-autoscaling:RegisterScalableTarget",
                "cloudwatch:DeleteAlarms",
                "cloudwatch:DescribeAlarmHistory",
                "cloudwatch:DescribeAlarms",
                "cloudwatch:DescribeAlarmsForMetric",
                "cloudwatch:GetMetricStatistics",
                "cloudwatch:ListMetrics",
                "cloudwatch:PutMetricAlarm",
                "datapipeline:ActivatePipeline",
                "datapipeline:CreatePipeline",
                "datapipeline:DeletePipeline",
                "datapipeline:DescribeObjects",
                "datapipeline:DescribePipelines",
                "datapipeline:GetPipelineDefinition",
                "datapipeline:ListPipelines",
                "datapipeline:PutPipelineDefinition",
                "datapipeline:QueryObjects",
                "ec2:DescribeVpcs",
                "ec2:DescribeSubnets",
                "ec2:DescribeSecurityGroups",
                "iam:GetRole",
                "iam:ListRoles",
                "sns:CreateTopic",
                "sns:DeleteTopic",
                "sns:ListSubscriptions",
                "sns:ListSubscriptionsByTopic",
                "sns:ListTopics",
                "sns:Subscribe",
                "sns:Unsubscribe",
                "sns:SetTopicAttributes",
                "lambda:CreateFunction",
                "lambda:ListFunctions",
                "lambda:ListEventSourceMappings",
                "lambda:CreateEventSourceMapping",
                "lambda:DeleteEventSourceMapping",
                "lambda:GetFunctionConfiguration",
                "lambda:DeleteFunction"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action": [
                "iam:PassRole"
            ],
            "Effect": "Allow",
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "iam:PassedToService": [
                        "application-autoscaling.amazonaws.com",
                        "dax.amazonaws.com"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": [
                "iam:CreateServiceLinkedRole"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "iam:AWSServiceName": [
                        "replication.dynamodb.amazonaws.com",
                        "dax.amazonaws.com",
                        "dynamodb.application-autoscaling.amazonaws.com"
                    ]
                }
            }
        }
    ]
}
like image 598
Fook Avatar asked Jul 08 '18 23:07

Fook


People also ask

How do I enable Auto Scaling in DynamoDB?

You can use the AWS Management Console to modify your DynamoDB auto scaling settings. To do this, go to the Additional settings tab for your table, and select Edit in the Read/write capacity section. For more information about these settings, see Enabling DynamoDB auto scaling on existing tables.

Is not authorized to perform Auto Scaling?

I am not authorized to perform an action in Application Auto Scaling. If you receive an AccessDeniedException when calling an AWS API operation, it means that the AWS Identity and Access Management (IAM) user or role credentials that you are using do not have the required permissions to make that call.

How do you attach IAM role to Auto Scaling group?

For instances in an Auto Scaling group, you must create a launch template or launch configuration and choose an instance profile to associate with the instances. An instance profile is a container for an IAM role that allows Amazon EC2 to pass the IAM role to an instance when the instance is launched.

What is the role of Auto Scaling?

Autoscaling provides users with an automated approach to increase or decrease the compute, memory or networking resources they have allocated, as traffic spikes and use patterns demand.


Video Answer


1 Answers

I don't know if you've already found an answer to this, but what you have to do is to go in on "Roles" in "IAM" and create a new role. You choose "Application Auto Scaling" and then "Application Auto Scaling -DynamoDB" click next a few more times and you're done. It doesn't appear that the current documentation covers this step.

like image 50
marty williams Avatar answered Oct 26 '22 02:10

marty williams