如何修复(eb init) NotAuthorizedError

Question

Select a default region
1.  us-east-1 : US East (N. Virginia)
2.  us-west-1 : US West (N. California)
3.  us-west-2 : US West (Oregon)
4.  eu-west-1 : EU (Ireland)
5.  eu-central-1 : EU (Frankfurt)
6.  ap-south-1 : Asia Pacific (Mumbai)
7.  ap-southeast-1 : Asia Pacific (Singapore)
8.  ap-southeast-2 : Asia Pacific (Sydney)
9.  ap-northeast-1 : Asia Pacific (Tokyo)
10. ap-northeast-2 : Asia Pacific (Seoul)
11. sa-east-1 : South America (Sao Paulo)
12. cn-north-1 : China (Beijing)
13. cn-northwest-1 : China (Ningxia)
14. us-east-2   :   US  East (Ohio)
15. ca-central-1 :  Canada (Central)
16. eu-west-2   :   EU  (London)
17. eu-west-3   :   EU  (Paris)
(default is 3): 1

Enter Application Name (default is "project93"):

返回的错误是：

ERROR: NotAuthorizedError - Operation Denied. User: arn:aws:iam::781394009687:user/Yunseong is not authorized to perform: elasticbeanstalk:CreateApplication on resource: arn:aws:elasticbeanstalk:us-east-1:781394009687:application/project93

当我在终端中尝试'eb init‘时，该错误将被返回。

我怎么才能修好它？

Answer 1

您面临的错误是用户Yunseong的IAM权限错误；用户Yunseong未被授权在资源project93上执行elasticBeanstalk:CreateApplication。

要解决这个问题，请添加一个IAM策略，允许用户使用elasticBeanstalk:CreateApplication：Yunseong。最佳实践是将其扩展到您需要的单个资源，project93 (您将需要完整的ARN)。

值得指出的是，EB应用程序可能需要许多权限，您可能需要重复跟踪权限错误的过程，直到获得正确的权限为止。您可以使用许多策略来加快这一过程，但另一种方法是让目标帐户中具有更高权限(admin)的用户部署该应用程序，这可能是一个非常耗时的过程。