Skip to content

Conversation

@olivermeyer
Copy link
Contributor

Reverts #12

@oavdeev does this work for you? I'm afraid I might have broken some other permissions. I'm now getting the following error:

Error: error waiting for Batch Compute Environment (custom-metaflow-cpu20220422132353471700000001) create: unexpected state 'INVALID', wanted target 'VALID'. last error: CLIENT_ERROR - User: arn:aws:sts::[REDACTED]:assumed-role/custom-metaflow-batch-execution-role/aws-batch is not authorized to perform: autoscaling:CreateAutoScalingGroup on resource: arn:aws:autoscaling:eu-west-1:[REDACTED]:autoScalingGroup:*:autoScalingGroupName/custom-metaflow-cpu20220422132353471700000001-asg-59cfd8b7-b102-3b1d-84fe-2c34f232b239 because no identity-based policy allows the autoscaling:CreateAutoScalingGroup action

It seems that the resource_prefix (in this case custom-metaflow) is being prepended to the autoscaling group name. I couldn't find where this is defined. I re-built with 0.3.2 and this error went away (but I got another one 😬)

@oavdeev
Copy link
Member

oavdeev commented Apr 22, 2022

Oh indeed, maybe we should've been looking at this doc, not the doc I linked to in the original issue

@oavdeev oavdeev merged commit 75f21f9 into outerbounds:master Apr 22, 2022
@olivermeyer olivermeyer deleted the revert-12-restrict-batch_execution_role-privileges branch April 22, 2022 14:06
Limess pushed a commit to signal-ai/terraform-aws-metaflow that referenced this pull request May 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants