Update the base account policy to modify the S3 bucket policy, update the command to pull the latest version of FUSE, and add permission to describe VPCs in the project account Role.

Author: harshithNayakRelevanceLab

config/access-policy.json

@@ -90,6 +90,7 @@
         "ec2:CopyImage",
         "ec2:CreateDefaultVpc",
         "ec2:AttachVolume",
+        "ec2:DescribeVpcs",
         "elasticloadbalancing:CreateLoadBalancer",
         "elasticloadbalancing:DeleteLoadBalancer",
         "elasticloadbalancing:ModifyLoadBalancerAttributes",

config/access-secure-policy.json

@@ -106,6 +106,7 @@
                 "ec2:DeleteVolume",
                 "ec2:DescribeInstanceTypes",
                 "ec2:AssociateIamInstanceProfile",
+                "ec2:DescribeVpcs",
                 "elasticloadbalancing:CreateLoadBalancer",
                 "elasticloadbalancing:DeleteLoadBalancer",
                 "elasticloadbalancing:ModifyLoadBalancerAttributes",

rg_main_stack.yml

@@ -128,6 +128,8 @@ Resources:
               - elasticloadbalancing:RegisterTargets
               - sts:AssumeRole
               - kms:Decrypt
+              - kms:GetKeyPolicy
+              - kms:PutKeyPolicy
             Resource: "*"
           - Sid: "RoleRelatedPermissions"
             Effect: Allow

scripts/bootstrap-scripts/bootstrap.sh

@@ -96,15 +96,18 @@ OS_VERSION=`cat /etc/os-release | grep VERSION= | sed 's/VERSION="//' | sed 's/"
 # Apply updates to environments based on environment type
 case "$(env_type)" in
     "ec2-linux") # Add mount script to bash profile
-        yum install -y fuse-2.9.2
+        yum install -y fuse fuse-common
+        modprobe fuse
         printf "\n# Mount S3 study data\nmount_s3.sh\n\n" >> "/home/ec2-user/.bash_profile"
         ;;
     "rstudio") # Add mount script to bash profile
-        yum install -y fuse-2.9.2
+        yum install -y fuse fuse-common
+        modprobe fuse
         printf "\n# Mount S3 study data\nmount_s3.sh\n\n" >> "/home/${RSTUDIO_USER}/.bash_profile"
         ;;
     "nextflow") # Add mount script to bash profile
-        yum install -y fuse-2.9.2
+        yum install -y fuse fuse-common
+        modprobe fuse
         printf "\n# Mount S3 study data\nmount_s3.sh\n\n" >> "/home/ec2-user/.bash_profile"
         ;;
     "sagemaker") # Update config and restart Jupyter