Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add volume permission to AMIs shared in the destination account #211

Open
rJunx opened this issue Mar 25, 2020 · 0 comments
Open

Add volume permission to AMIs shared in the destination account #211

rJunx opened this issue Mar 25, 2020 · 0 comments

Comments

@rJunx
Copy link
Contributor

rJunx commented Mar 25, 2020

Is your feature request related to a problem? Please describe.
After sharing AMIs from the source account to the destination, the destination admin user is not able to copy the AMIs with the error 'You do not have permission to access the storage of this ami'. The use case of copying shared AMIs in destination accounts is related to system robustness and security, e.g. preventing source AMIs accidentally deleted or securing AMIs with own CMK (encryption).

Describe the solution you'd like
Add snapshot_users to allow users to create volumes. More details are referred to https://packer.io/docs/builders/amazon-ebs.html

Describe alternatives you've considered
None.

Additional context
Without the volume permission granted, the shared AMIs can only be used to create environments, but not copy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant