AWSElasticBeanstalkFullAccess (Provides full access...) equivalent?

Question

I'm following a course on AWS Beanstalk that might be out of date. In IAM Management Console a user is added and one of the existing policies attached directly is AWSElasticBeanstalkFullAccess, which I cannot find while filtering policies myself.

Has this changed name? How can I find it or an equivalent?

score 21 · Accepted Answer · answered May 12 '21 at 06:06

21

AWSElasticBeanstalkFullAccess was a managed IAM policy by AWS. They are now transitioning towards a new policy which is called AdministratorAccess-AWSElasticBeanstalk. Its not completely the same policy. If needed to follow along with your tutorial you could create the old AWSElasticBeanstalkFullAccess again. I would first try to use AdministratorAccess-AWSElasticBeanstalk.

If you want to read about the transition you can do that here:

Previously, Elastic Beanstalk supported two other managed user policies, AWSElasticBeanstalkFullAccess and AWSElasticBeanstalkReadOnlyAccess. We plan on retiring these previous policies. You might still be able to see and use them in the IAM console. Nevertheless, we recommend that you transition to using the new managed user policies, and add custom policies to grant permissions to custom resources, if you have any.

You can use the waybackmachine to copy over the old policy if needed

answered May 12 '21 at 06:06

Max Visser

577
4
10

2

`eb update` results in `ERROR: NotAuthorizedError - Operation Denied. Access Denied` for me with both `AdministratorAccess-AWSElasticBeanstalk` and `AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy` – Jon Burgess May 14 '21 at 06:15
3

FWIW, I was missing `s3:ListBucketMultipartUploads` permission. I discovered this by running `eb --debug`. – Jon Burgess May 16 '21 at 23:16
2

Great answer made even better by the wayback link to the old policy! – Don Shrout Aug 19 '21 at 22:56
2

s3:ListBucketMultipartUploads worked, thanks – Christoph Ostertag Sep 16 '21 at 17:45

AWSElasticBeanstalkFullAccess (Provides full access...) equivalent?

1 Answers1

Linked