The human-centric platform for production ML & AI

Outerbounds

Screenshot 2023-02-07 at 9.52.46 AM.png

Quick question - what other additional IAM permissions do we need beyond the ones from the <https://github.com/outerbounds/terraform-aws-metaflow|template>?

Seems like AWS Batch is having trouble downloading the code package. I also tried adding s3 + kms policies for the `ecs_execution_role` but that didn't seem to work.

a wild guess but if ListBucket is missing you may see that error

I ran into an issue where HeadObject returns 403 if the object doesn't exist and you don't have ListBucket. I guess AWS logic is that if you don't have ListBucket, they don't want you to be able to brute force key names, so they return 403 not 404 in that case

I see `ListBucket`  in the `batch_s3_task_role` but not in the `ecs_execution_role`. But looking at the job definition of the batch job, it looks like `batch_s3_task_role` is the relevant IAM role. Correct me if I'm wrong?