aws 部署错误 ebcli.objects.exceptions.NotAuthorizedError：操作被拒绝。访问被拒绝

问题描述 投票：0回答：2

我一直在尝试使用 

 eb create django-env
将我的 python 程序部署到 aws，但它一直在产生此错误

NotAuthorizedError - Operation Denied. Access Denied

进一步深入挖掘

eb create --debug
它产生了这个错误

ebcli.lib.aws.InvalidParameterValueError: Platform ARN is invalid: Not an IAM ARN: 64bit Amazon Linux 2 v3.3.4 running Python 3.8.

当到达

Select a load balancer type
部分时，我选择了选项2，即应用程序

但是当我为 

option 1 i.e. classic
选择 
Select a load balancer type section
时，它产生了

ebcli.objects.exceptions.NotAuthorizedError: Operation Denied. Access Denied

这是错误信息

    2021-08-01 09:38:36,597 (DEBUG) ebcli.core.fileoperations : File size: 78041269
    2021-08-01 09:38:36,612 (DEBUG) ebcli.lib.elasticbeanstalk : Inside get_storage_location api wrapper
    2021-08-01 09:38:36,612 (DEBUG) ebcli.lib.aws : Making api call: (elasticbeanstalk, create_storage_location) to region:us-west-2 with args:{}
    2021-08-01 09:38:38,811 (DEBUG) ebcli.lib.aws : API call finished, status = 200
    2021-08-01 09:38:38,811 (DEBUG) ebcli.lib.aws : Response: {'S3Bucket': 'elasticbeanstalk-us-west-2-395403681453', 'ResponseMetadata': {'RequestId': '2a9c9762-4a6d-46e0-9a28-c92a300b3a8c', 'HTTPStatusCode': 200, 'date': 'Sun, 01 Aug 2021 08:38:39 GMT', 'RetryAttempts': 0}}
    2021-08-01 09:38:38,811 (DEBUG) ebcli.lib.aws : Creating new Botocore Client for s3
    2021-08-01 09:38:38,906 (DEBUG) ebcli.lib.aws : Successfully created session for s3
    2021-08-01 09:38:38,906 (DEBUG) ebcli.lib.aws : Making api call: (s3, list_objects) to region: us-west-2 with args:{'Bucket': 'elasticbeanstalk-us-west-2-395403681453', 'Prefix': 'django-tutotrial/app-210801_093611.zip'}
    2021-08-01 09:38:41,130 (DEBUG) ebcli.lib.aws : API call finished, status = 200
    2021-08-01 09:38:41,130 (DEBUG) ebcli.lib.aws : Response: {'ResponseMetadata': {'RequestId': 'CJTFFNJ9QBMJAQWW', 'HostId': 'rY/gGdjoVhTa3Z2JgGgQAtGlQnf9Gg/ksaJjQmEF3zgxt9n+ddNL82b7HngUg1If4j4M4R6c2iA=', 'HTTPStatusCode': 200, 'date': 'Sun,01 Aug 2021 08:38:43 GMT', 'RetryAttempts': 0}, 'IsTruncated': False, 'Marker': '', 'Name': 'elasticbeanstalk-us-west-2-395403681453', 'Prefix': 'django-tutotrial/app-210801_093611.zip', 'MaxKeys': 1000, 'EncodingType': 'url'}
    2021-08-01 09:38:41,130 (INFO) eb : Uploading archive to s3 location: django-tutotrial/app-210801_093611.zip
    2021-08-01 09:38:41,135 (DEBUG) ebcli.core.fileoperations : Project root found at: C:\users\system1\django\firstproject
    2021-08-01 09:38:41,135 (DEBUG) ebcli.lib.s3 : Upload Application Version. File size = 78041269
    2021-08-01 09:38:41,135 (DEBUG) ebcli.lib.s3 : Doing multi-threaded upload. Parts Needed=15
    2021-08-01 09:38:41,140 (DEBUG) ebcli.lib.aws : Making api call: (s3, list_multipart_uploads) to region: us-west-2 withargs:{'Bucket': 'elasticbeanstalk-us-west-2-395403681453', 'Prefix': 'django-tutotrial/app-210801_093611.zip'}
    2021-08-01 09:38:41,635 (DEBUG) ebcli.lib.aws : Response: {'Error': {'Code': 'AccessDenied', 'Message': 'Access Denied'}, 'ResponseMetadata': {'RequestId': 'CJT8SW62G2YGRV15', 'HostId': 'zBtbEFfyKXfyCev+TIb84iVzuvFoFa9KTgUQZ/CQR99QS0urPPu+oJjnO/sJbKLHLbsiSqwuOPk=', 'HTTPStatusCode': 403, 'date': 'Sun, 01 Aug 2021 08:38:41 GMT', 'RetryAttempts': 0}}
    2021-08-01 09:38:41,640 (DEBUG) ebcli.lib.aws : API call finished, status = 403
    2021-08-01 09:38:41,640 (DEBUG) ebcli.lib.aws : Received a 403
    2021-08-01 09:38:41,885 (INFO) eb : Traceback (most recent call last):
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\operations\commonops.py", line 540, in create_app_
    version
        s3.get_object_info(bucket, key)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 90, in get_object_info
        __raise_if_bucket_is_empty(result)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 53, in __raise_if_bucket_is_empty
        raise NotFoundError('Object not found.')
    ebcli.objects.exceptions.NotFoundError: Object not found.

    During handling of the above exception, another exception occurred:

    Traceback (most recent call last):
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\aws.py", line 212, in make_api_call
        response_data = operation(**operation_options)
      File "c:\users\system1\django\venv\lib\site-packages\botocore\client.py", line 386, in _api_call
        return self._make_api_call(operation_name, kwargs)
      File "c:\users\system1\django\venv\lib\site-packages\botocore\client.py", line 705, in _make_api_call
        raise error_class(parsed_response, operation_name)
    botocore.exceptions.ClientError: An error occurred (AccessDenied) when calling the ListMultipartUploads operation: Access Denied

    During handling of the above exception, another exception occurred:

    Traceback (most recent call last):
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\core\ebrun.py", line 62, in run_app
        app.run()
      File "c:\users\system1\django\venv\lib\site-packages\cement\core\foundation.py", line 797, in run
        return_val = self.controller._dispatch()
      File "c:\users\system1\django\venv\lib\site-packages\cement\core\controller.py", line 472, in _dispatch
        return func()
      File "c:\users\system1\django\venv\lib\site-packages\cement\core\controller.py", line 478, in _dispatch
        return func()
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\core\abstractcontroller.py", line 92, in default
        self.do_command()
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\controllers\create.py", line 281, in do_command
        createops.make_new_env(env_request,
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\operations\createops.py", line 75, in make_new_env
        commonops.create_app_version(env_request.app_name, process=process_app_version,
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\operations\commonops.py", line 548, in create_app_version
        s3.upload_application_version(bucket, key, file_path)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 149, in upload_application_version
        upload_workspace_version(bucket, key, file_path, 'Application')
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 144, in upload_workspace_version
        result = multithreaded_upload(bucket, key, file_path)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 178, in multithreaded_upload
        upload_id = _get_multipart_upload_id(bucket, key)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 311, in _get_multipart_upload_id
        response = _make_api_call('list_multipart_uploads',
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\s3.py", line 40, in _make_api_call
        return aws.make_api_call('s3', operation_name, **operation_options)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\aws.py", line 221, in make_api_call_handle_response_code(e.response, attempt, aggregated_error_message)
      File "c:\users\system1\django\venv\lib\site-packages\ebcli\lib\aws.py", line 289, in _handle_response_code
        raise NotAuthorizedError('Operation Denied. ' + message)
    ebcli.objects.exceptions.NotAuthorizedError: Operation Denied. Access Denied

这可能是什么原因。当我在 aws 上检查用户的帐户时，我可以看到活动发生在几分钟前。在 

eb create
操作期间 这说明问题出在aws本身，只是某些授权没有到位。 我最初认为这是一个凭据问题。后来检查我链接的帐户时，我发现用户的帐户上次活动发生了变化

  1. 请问我该如何纠正这个错误？
  2. 如何在 aws 中找到特定用户的错误日志？
  3. 我的 ws 帐户上有什么我需要做的吗？，我已经创建了凭据，并且该帐户显示通过更新与用户相关的 lst 活动时间在其上发生了一些活动
  4. 我需要在我的 aws 账户上进行某些配置吗？
amazon-web-services amazon-s3 amazon-ec2 amazon-elastic-beanstalk
2个回答
3
投票

对于我的情况，我通过将此策略添加到用户的策略列表中解决了这个问题：“AmazonS3FullAccess”

0
投票

针对OP的问题#2，您可以使用

--debugboto
运行create命令来获取更详细的错误日志。

eb create --debugboto

我遇到了同样的错误，详细日志表明 S3 存在权限问题。

最新问题
© www.soinside.com 2019 - 2024. All rights reserved.