What are the list of policies required for setting...
# support
t
Hello, I was wondering if you had a list of policies authorization that are required to setup Medplum on AWS S3 ? At the moment the only way for me to check, is to run the script and check what the next error is. I guess it would be easier if you shared the list of authorization required. Thank you.
I think I've arrived at a point where it looks like the roles are fine. I'm wondering though, I have an error when trying to run the bootstrap command :
Copy code
CDKToolkit |  2/12 | 11:30:40 | CREATE_IN_PROGRESS   | AWS::IAM::Role          | LookupRole Resource creation Initiated
[11:30:44] Stack CDKToolkit has an ongoing operation in progress and is not stable (CREATE_IN_PROGRESS)
CDKToolkit |  0/12 | 11:30:44 | CREATE_FAILED        | AWS::S3::Bucket         | StagingBucket Resource handler returned message: "Access Denied (Service: S3, Status Code: 403, Request ID: 5482S2H02Y312C9C, Extended Request ID: WCOhj+VWSoS3orWxZNXxcOhtUEtjc3pVHaIWEdGDDfX4Us4rBSZ+YbFiRtREC7gNzlJgVhAveps=)" (RequestToken: 97f267ba-40a3-5222-b8c1-a9b0820277cb, HandlerErrorCode: GeneralServiceException)
Does that ring a bell to someone ?
Ok, it looks like it was another s3 authorization that was not in my policy that blocked it.
Here is the min_req at least for initiliazing and bootstraping, still working on the synth and deploy !
r
Hi @thomabig - I'm sorry I'm not familiar with those exact errors, but I wanted to make sure you saw our note about updating your bucket policies when deploying outside of us-east-1 https://www.medplum.com/docs/self-hosting/install-on-aws#update-bucket-policies
t
Hi @rahul1 Yes, I saw this and I actually had to do this by hand because I've ran the script a first time, and I was missing a authorization. The second time I ran it, It would not work for storage if I remember correctly, so I've copied the policy from app to storage by changing the resources. I know have a self hosted medplum up and running 🙂 Thanks
r
Sorry for the rough edges here @thomabig , but I'm glad you have something working now!
153 Views