Join Log in
Score:1
avatar Server

What is the new policy action needed to allow the new DescribeSecurityGroupRules

ly flag
gsempe

We have IAM policies in place that used to permit the roles to edit a security group rules

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:RevokeSecurityGroupIngress",
                "ec2:AuthorizeSecurityGroupIngress"
            ],
            "Resource": "arn:aws:ec2:eu-west-1:XXXXXXXXXXX:security-group/sg-XXXXXXXXXXX"
        }
    ]
}

Since yesterday these roles are blocked with this message:

you may be missing iam policies that allow DescribeSecurityGroupRules

I did my research and it comes from the AWS update described in this article but there is no indication that it might break policies and no indication either on what action is necessary to make the policy works again.

What could be the shorter change I have to do to fix this problem?

513
1 + 1
Luiz avatar
mx flag
Luiz
Same problem here!
0
Reply
Score:2
Luiz avatar Server
mx flag
Luiz

Found the solution: seems like the option DescribeSecurityGroupRules is not yet available through the IAM UI but you can manually add it via JSON editing.

Yes, the UI will say the option does not exist:

enter image description here

But if you save the policy, it will work.

This tweet has helped me: https://twitter.com/AWSSupport/status/1413285145663184897

0 + 1
ly flag
gsempe
Thank you very much it works
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.