#9655 AWS: Please grant TFT team access to retrieve quota information
Closed: Fixed 3 years ago by kevin. Opened 3 years ago by makopec.

In TFT team we would like to retrieve quota information. This would help us monitor resources and we would be able to create alerts.

Not limited to these commands (options):

# aws --profile rhel gamelift describe-ec2-instance-limits

An error occurred (AccessDeniedException) when calling the DescribeEC2InstanceLimits operation: User: arn:aws:iam::727920394381:user/arr-testing-farm-test is not authorized to perform: gamelift:DescribeEC2InstanceLimits
# aws --profile rhel service-quotas list-service-quotas --service-code ec2

An error occurred (AccessDeniedException) when calling the ListServiceQuotas operation: User: arn:aws:iam::727920394381:user/arr-testing-farm-test is not authorized to perform: servicequotas:ListServiceQuotas

EOD for @mobrien so this will get looked at on Monday

Metadata Update from @smooge:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: aws, medium-gain, medium-trouble, ops

3 years ago

Hi, I think you may have your credentials set up wrong or be contacting the wrong team the account number 727920394381 referenced doesn't belong to the fedora AWS account

Metadata Update from @mobrien:
- Issue assigned to mobrien

3 years ago

indeed @mobrien sorry, this was for our internal account and file by an error, can you check for our fedora accounts, we have perms for that? aws-fedora-ci/*

Hi @mobrien, you are right. I mixed accounts. Sorry about that.
Looks like @mvadkert was faster in response.

I have updated the aws-fedora-ci role to be able to list and get service quotas as per https://docs.aws.amazon.com/cli/latest/reference/service-quotas/index.html#cli-aws-service-quotas

Let me know if there are any further issues.

@makopec can you check pls? If something ping me on IRC

Has this worked for you? Let me know if you need any more help with it?

@mobrien I confirm we are able to get quotas with aws-cli.
Thank you.

Metadata Update from @makopec:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

@mobrien I confirm we are able to get quotas with aws-cli.
Thank you.

Great!

Issue status updated to: Open (was: Closed)

3 years ago

Issue status updated to: Closed (was: Open)
Issue close_status updated to: Fixed

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Done