Permission errors when creating a stack

Question

Hello

I am trying to create a stack in AWS and wanted to know if there a better way of adding the required permissions for the stack to complete than just trying to create the stack, viewing the permisson error, adding the permission to the user, trying to create the stack again. (Essentially trial and error)

I have done this about 40 times (have amassed 35 permissions!) and wanted to know is there a better way?

Thanks in advance.

Mihailo

Didier_Durand · Answer

Hi,

What you can do to be faster: 
1) execute your stack creation under a role with all privileges to allow it to go through
2) Go then to CloudTrail to see all API calls made during the creation by CloudFormation
3) Create a role with exactly the IAM authorizations corresponding to the API calls.

That is the fastest way I know to be able to define a role for CFN with least privileges.

Best,

Didier

Permission errors when creating a stack

Relevant content