I need help on Week 1 Assignment: Troubleshooting Database Connectivity on AWS

[OF4]

On the week 1 assignment: Troubleshooting Database Connectivity on AWS, towards the last stage on Amason3 > Buckets > Edit bucket Policy, when I wanted to save the changes, I got an error message stating “You need Permission : user *** is not authorized to perform: access-analyzer: Validate Policy on resourse ***”

S3 Bucket Error Message1581×697 84.4 KB

I tried again this morning to start the assignment afresh, however, when I clicked on the AWS link on the Vocareum page I got this error message “The credentials in your login link were invalid. Please contact your administrator.”
Please assist

[Georgios]

Hello @OF4,
In the first issue I could reproduce the issue in this post. Could you check you have the correct resource in the bucket policy it might be missing the correct parameter (should look like this: "arn:aws:s3:::<YOUR-DATA-BUCKET>/csv/*" to work.

In the second issue after you run a new notebook for a second time the AWS has the previous credentials. Just logout and click the link again to fix it:

[SantoshE]

Hi @Georgios , I have also seen same warning message for me, but I was able to save my settings. I have done all steps correctly, but still I got less grade. The submission report says my S3 Bucket policy was not updated correctly. Here is my screenshot. Please let me know

[OF4]

Hello @Georgios
Thank you for your response. I tried to start the assignment again, however, when I clicked on the AWS link on the Vocareum page, the dot on the link turned yellow but never turned green until the 2 hours for the assignment elapsed. Please if there an error with the link kindly fix it, if not maybe I will try again later.

[Georgios]

Hello @SantoshE,
It looks like you are use a different resource location. Just use arn:aws:s3:::/csv/*" with /csv included at the end. Could you add that and try again, thanks

[Georgios]

Hello @OF4,
Sorry for the inconvenience, there has been an issue with lab last week due to a database version deprecation. I would update if I have an eta when it will be resolved. Thank you

[Georgios]

Hello @OF4 , @SantoshE,
The lab seems to be working now, could you try again and for the last part:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::<YOUR-DATA-BUCKET>/csv/*",
            "Condition": {
                "IpAddress": {
                    "aws:SourceIp": "<YOUR-CLOUD9-ENV-IP-ADDRESS>" 
                }
            }
        }
    ]
}

Use the correct Resource and add /csv/* at the end after your bucket name. (only change this: < YOUR-DATA-BUCKET > with the output you got previously). Hope it helps

[Edmund_Koh]

Hi @Georgios Im receiving error when following the step along the creation of cloud9. Can I get help on this please?

Access denied You don't have permission to iam:GetAccountPasswordPolicy. To request access, copy the following text and send it to your AWS administrator. Learn more about troubleshooting access denied errors. User: arn:aws:sts::211125681734:assumed-role/voclabs/user2407001=<Username>Action: iam:GetAccountPasswordPolicyContext: no identity-based policy allows the action

[Georgios]

Hello @Edmund_Koh,
I couldn’t reproduce the issue, which part of the lab are you facing the issue, when you try to create the first environment or when you delete it later to create the correct one:

Could you check you are using the correct settings, thanks

[Edmund_Koh]

Hi @Georgios managed to resolved the issue, thank you