Graffiti Monkey IAm Policy

[Chris-Pr]

Does anyone have a successful IAM policy for Graffiti Monkey they can share?

I've tried a few but I am clearing missing something as still getting 404 from boto.

[paulwakeford]

Can you share the full command you are using and the error?

[dpalomin]

I'm using the policy below.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:CreateTags",
                "ec2:DeleteTags",
                "ec2:Describe*",
                "ec2:ModifySnapshotAttribute",
                "ec2:ModifyVolumeAttribute",
                "ec2:ResetSnapshotAttribute"
            ],
            "Resource": "*"
        }
    ]
}

[ivica-k]

This is the policy i'm using, and it's heavily based on what you shared here.

{
	"Version": "2012-10-17",
	"Statement": [{
		"Sid": "SYS1509",
		"Effect": "Allow",
		"Action": [
			"elasticbeanstalk:AddTags",
			"elasticbeanstalk:RemoveTags",
			"ec2:CreateTags",
			"ec2:Describe*",
			"ec2:ModifySnapshotAttribute",
			"ec2:ModifyVolumeAttribute",
			"ec2:ResetSnapshotAttribute"
		],
		"Resource": "*"
	}]
}