mercredi 1 avril 2015

Does AWS cfn-init need a Profile/Role for DescribeStackResource?

From this page:



To use the AWS CloudFormation bootstrap features, you need to provide AWS credentials to the bootstrap scripts. We strongly recommend that you assign an IAM role to on the EC2 instance when the instance is launched.



This seems pretty straightforward, but when I look at any example from all over the place in AWS documents, they never set up roles or profiles for this. For example, here.


What am I missing? Are there scenarios that cfn-init requires extra permissions while not in others?





Aucun commentaire:

Enregistrer un commentaire