https://community.cloudera.com/t5/Support-Questions/Cluster-creation-failed-on-Cloudbreak-hosted-on-AWS/m-p/242429#M204230 <P><A rel="user" href="https://community.cloudera.com/users/10827/pdarvasi.html" nodeid="10827">@pdarvasi</A>: Ok, this is what my cb-policy.json looks like: </P><P>{<BR /> "Effect": "Allow",<BR /> "Action": [<BR /> "iam:ListRolePolicies",<BR /> "iam:GetRolePolicy",<BR /> "iam:ListAttachedRolePolicies",<BR /> "iam:ListInstanceProfiles",<BR /> "iam:PutRolePolicy",<BR /> "iam:PassRole",<BR /> "iam:GetRole"<BR /> ],<BR /> "Resource": [<BR /> "*"<BR /> ]<BR /> },</P><P>{<BR /> "Effect": "Allow",<BR /> "Action": [<BR /> "iam:ListRolePolicies",<BR /> "iam:GetRolePolicy",<BR /> "iam:ListAttachedRolePolicies",<BR /> "iam:ListInstanceProfiles",<BR /> "iam:PutRolePolicy",<BR /> "iam:PassRole",<BR /> "iam:GetRole"<BR /> ],<BR /> "Resource": [<BR /> "*"<BR /> ]<BR /> },<BR /> {<BR /> "Effect": "Allow",<BR /> "Action": [<BR /> "autoscaling:CreateAutoScalingGroup",<BR /> "autoscaling:CreateLaunchConfiguration",<BR /> "autoscaling:DeleteAutoScalingGroup",<BR /> "autoscaling:DeleteLaunchConfiguration",<BR /> "autoscaling:DescribeAutoScalingGroups",<BR /> "autoscaling:DescribeLaunchConfigurations",<BR /> "autoscaling:DescribeScalingActivities",<BR /> "autoscaling:DetachInstances",<BR /> "autoscaling:ResumeProcesses",<BR /> "autoscaling:SuspendProcesses",<BR /> "autoscaling:UpdateAutoScalingGroup"<BR /> ],<BR /> "Resource": [<BR /> "*"<BR /> ]<BR /> },<BR /> {<BR /> "Effect": "Allow",<BR /> "Action": [<BR /> "kms:ListKeys",<BR /> "kms:ListKeyPolicies",<BR /> "kms:ListAliases"<BR /> ],<BR /> "Resource": "*"<BR /> }</P><P>========================================================</P><P>Are you saying, I also need to add the below?</P><P>{ "Effect": "Allow",<BR /> "Action": [<BR /> "ec2:*"<BR /> ],<BR /> "Resource": "*"<BR /> }</P> Fri, 01 Feb 2019 04:39:38 GMT pushpak_nandi 2019-02-01T04:39:38Z