Authorization error when deploying Classification instance in BlueXP
Applies to
- NetApp Console
- Classification (formerly Data Sense)
Issue
Following error is observed when deploying a Classification instance in NetApp Console:
Deployment unsuccessful. Make sure your configuration meets the requirements as described in the documentationFull error details: The following resource(s) failed to create: [ComplianceInstance]. Rollback requested by user. | 1 validation error detected: Value 'You are not authorized to perform this operation. User: arn:aws:sts::xxx:assumed-role/xxx/i-xxx is not authorized to perform: ec2:RunInstances on resource: arn:aws:ec2:us-east-1:xxx:volume/* with an explicit deny in a service control policy.Cause
The permission ec2:RunInstances is missing from the IAM role for the connector
Solution
Add ec2:RunInstances and any other missing permissions to the connector's IAM role
Partner Notes
partnerNotes_text
Additional Information
Internal Notes
internalNotes_text
