Help! Error setting up Asset Server, IAM Permissions

Hi all,

Am trying to setup AWS Portal with deadline. Running the AWSPortalLink Installer I was able to install the Portal Link Server successfully, but I encountered an error when setting up the Asset Server, and it wasn’t able to install.

This is an excerpt from the bitrock installer log:

Performing initial setup of AWS Portal Asset Server with Deadline...
Executing C:\Program Files\Thinkbox\Deadline10\bin/DeadlineCommand.exe
Error running C:\Program Files\Thinkbox\Deadline10\bin/DeadlineCommand.exe RunAWSPortalS3Setup ap-southeast-2: Program ended with an error exit code
[12:29:46] Please enter your AWS Access Key ID:
Please enter your AWS Secret Access Key:
Error: An unexpected error occurred while setting up AWS Portal: Got Access Denied when trying to PutBucket in S3 Bucket aws-portal-cache-054c8b6f-ce37-42da-a38a-f6d6b56a7ccb. Please make sure your user has the 'iam:GetUser' IAM Permission to make these error messages better.
 Please make sure your IAM user <unknown> has the following IAM Permission(s) to access S3 Bucket.
s3:PutBucket
 (Deadline.AWS.AWSPortalSetupException)
Program ended with an error exit code
Creating Shortcut for Uninstall AWSPortalLink
Executing C:\Program Files\Thinkbox\Deadline10\bin/deadlinecommand

I tried adding ‘s3:PutBucket’ to my IAM Policy but that didn’t work either (also that particular policy isn’t recognised by aws).

Just double checking, you are using the IAM policy from the 10.1 docs page here - https://docs.thinkboxsoftware.com/products/deadline/10.1/1_User%20Manual/manual/aws-portal-setup-policy-text.html

I’ve seen folks accidentally use the 10.0 docs, which is just different enough to fail, but the URL is almost identical.

Yup, I re-copied over that policy just to make sure, I got the same error.

Also we’re using 10.1.5.1 Release.

Oh, we also haven’t got payment details set up on our AWS account yet, could that be an issue? I read here (https://aws.amazon.com/premiumsupport/knowledge-center/create-and-activate-aws-account/) that you need a set up a payment method to activate the account and be able to use any services

Oh, yeah that account’s gotta be activated or else nothing is going to be happy.

1 Like