Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

s3_enable_access_logging job is missing minimal permissions and needs more meaningful logs #5

Closed
martinianodl opened this issue Aug 28, 2020 · 1 comment · Fixed by #6
Closed

s3_enable_access_logging job is missing minimal permissions and needs more meaningful logs #5

martinianodl opened this issue Aug 28, 2020 · 1 comment · Fixed by #6

Comments

@martinianodl
Copy link
Collaborator

martinianodl commented Aug 28, 2020 •
edited
Loading

When running the s3_enable_access_logging job without the s3:ListBucket permissions I'm getting this error: botocore.exceptions.ClientError: An error occurred (403) when calling the HeadBucket operation: Forbidden.

The job has two issues that needs to be addressed:

  1. The list of minimal permissions needs to be updated with s3:ListBucket
  2. The job should have a more meaningful error when the user doesn't have the correct permissions.

Thanks
@martinianodl martinianodl changed the title s3_enable_default_encryption job is missing minimal permissions and needs more meaningful logs s3_enable_access_logging job is missing minimal permissions and needs more meaningful logs Aug 28, 2020
@mzkhan mzkhan linked a pull request Aug 28, 2020 that will close this issue
S3 access logs permissions #6
Merged
@vikramsinghvirdi
Copy link
Contributor

Resolved in release V1.0.0
#7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

S3 access logs permissions mzkhan/secure-state-remediation-jobs
2 participants
@martinianodl @vikramsinghvirdi