AWS user permissions needed to install or upgrade the Operations Manager Virtual Machine

Products

• Operations Manager

Environment

Product Version: 2.6

Resolution

Checklist:
Below are the minimal AWS permissions the user associated with the Access Key and Secret Key needs to have in order to install or upgrade the Operations Manager using Platform Automation:
 

EC2 Permissions

• EC2: RunInstances
  • Launches the specified number of instances using an AMI for which you have permissions.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/run-instances.html
• EC2: CreateTags
  • Adds or overwrites the specified tags for the specified Amazon EC2 resource or resources.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/create-tags.html
• EC2: DescribeVolumes
  • Describes the specified EBS volumes or all of your EBS volumes.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-volumes.html
• EC2: ModifyVolume
  • You can modify several parameters of an existing EBS volume, including volume size, volume type, and IOPS capacity.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-volume.html
• EC2: DescribeAddress
  • Describes the specified Elastic IP addresses or all of your Elastic IP addresses.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-addresses.html

• EC2: AssociateAddress
  • Associates an Elastic IP address with an instance or a network interface
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/associate-address.html
• EC2: DescribeInstances
  • Describes the specified instances or all of AWS account's instances
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-instances.html
• EC2: StarInstances
  • Starts an Amazon EBS-backed instance that you've previously stopped
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/start-instances.html
• EC2: StopInstances
  • Stops an Amazon EBS-backed instance.
  • https://docs.aws.amazon.com/cli/latest/reference/ec2/stop-instances.html

IAM Permissions

• IAM: GetRole
  • Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy that grants permission to assume the role.
  • https://docs.aws.amazon.com/cli/latest/reference/iam/get-role.html
• IAM: PassRole