Hello everyone,
I’m currently trying to practice the lab “Setting up CloudFront for a simple S3 website” from the AWS Certified CloudOps Engineer – Associate course.
Unfortunately, I’m not able to validate the lab and most of the actions are blocked with Access Denied errors, which prevents me from practicing and learning the workflow.
As a student, I’m trying also to practice and learn on aws playground things such as how to:
Create IAM users, groups, and roles
Host a simple “Hello World” website on S3
Set up a CloudFront distribution pointing to the S3 bucket
Deploy a small project from GitHub
I’ll need to check how much access we give to CloudFront, but it’s worth pointing out that the error you’re displaying isn’t actually that problem. It’s complaining that we don’t allow you to “ListApplications”. As it turns out, we don’t generally allow “list” type permissions (I’m not completely sure why that is – it might be “security through obscurity”) you don’t really need those permissions to do things that you want to use. You just can’t see certainly things listed in the console, is all.
