Hi Tarun,

As Eric mentioned, the TR-Sandbox environment is not supported by Launchpad.

However, you may be able to use DDS-Test (our test sandbox) for your PoC.

Please contact Brian Rohan about your PoC goals and to get access to the DDS-Test Instance.

Thank you,
Heather

Hi Tarun,

It looks like the aws keys may have expired that were used to create the instance. I've manually deleted the record now and you should be good to go if you've deleted all the resources in your aws account as well.

Thanks,

Hi Tarun,

This is the raw error, it seems your user does not have permission to do certin actions in AWS. Also, are you using tr-sandbox? That environment is not supported by launchpad.

2017-09-20 06:56:07.529 ERROR --- [io-5000-exec-10] c.t.d.launchpad.ClusterJobService : Failed to validate AWS Keys for 13837c40-9277-4a9e-bdd7-8df29d87772f: User: arn:aws:sts::443862268467:assumed-role/202578-PowerUser/kamran.shams@thomsonreuters.com is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: * (Service: AmazonIdentityManagement; Status Code: 403; Error Code: AccessDenied; Request ID: c6e9357a-9dd0-11e7-a05d-f732bc01275e) 

@Eric.Helgeson,

Hi Eric,

Thank you for your support. Yes, we are using tr-sandbox to provision the DF because our earlier datafusion cluster was configured on tr-sandbox only. We are in stage of POC so we will not get the prod or non-prod access that needs a cost center id. Is there anyway you can help us to complete this POC? Once again

Once again thank you for your help.

with regards,

Tarun

@Eric.Helgeson

Hi Eric,

Can you please help me to confirm , If my MGMT account is associated with non-prod environment( NOT tr-sandbox) and have access as 202578-PowerUser, would I be able to provision new DF cluster ? I have asked our management to give cost center to update my account with non-prod access so that I can provision the new DF.

Thank you Eric.

with regards,

Tarun

Hi Heather,

Thank you for your response.

Our Market development team wants a DF cluster for POC and DEMO purpose for the clients as when require. So we have decided to configure at non-prod environment. Just to confirm , is this non-prod environment supported by launchpad ?

However as advice by you , I will talk to Brian Rohan for our POC goals.

Once again thank you for the guidance and help.

with regards,

Tarun

Hi Tarun,

In response to the question prior, re: using an AWS environment outside of TR-Sandbox. Below are the AWS permissions you will need to utilize Launchpad.


Create:

Permission,Resource

AllocateAddress,EC2 EIP

AssociateRouteTable,EC2 RouteTable

AttachInternetGateway,EC2 InternetGateway

AuthorizeSecurityGroupEgress,EC2 SecurityGroup

AuthorizeSecurityGroupIngress,EC2 SecurityGroup

CreateInternetGateway,EC2 InternetGateway

CreateNatGateway,EC2 NatGateway

CreateRoute,EC2 RouteTable

CreateRouteTable,EC2 RouteTable

CreateRouteTable,EC2 VPC

CreateSecurityGroup,EC2 SecurityGroup

CreateSecurityGroup,EC2 VPC

CreateSubnet,EC2 Subnet

CreateSubnet,EC2 VPC

CreateTags,

CreateVpc,EC2 VPC

DeleteInternetGateway,EC2 InternetGateway

DeleteKeyPair,EC2 KeyPair

DeleteRouteTable,EC2 RouteTable

DeleteSecurityGroup,EC2 SecurityGroup

DeleteVpc,EC2 VPC

DetachInternetGateway,EC2 InternetGateway

ImportKeyPair,EC2 KeyPair

ModifyInstanceAttribute,EC2 Instance

ModifyVpcAttribute,EC2 VPC

ReleaseAddress,EC2 EIP

RevokeSecurityGroupEgress,EC2 SecurityGroup

RunInstances,EC2 Ami

Destroy

Permission,Resource

DeleteInternetGateway,EC2 InternetGateway

DeleteKeyPair,EC2 KeyPair

DeleteNatGateway,EC2 NatGateway

DeleteRouteTable,EC2 RouteTable

DeleteSecurityGroup,EC2 SecurityGroup

DeleteSubnet,EC2 Subnet

DeleteVpc,EC2 VPC

DetachInternetGateway,EC2 InternetGateway and 1 more

DisassociateRouteTable,EC2 SubnetRouteTableAssociation

ReleaseAddress,EC2 EIP

TerminateInstances,EC2 Instance

Hi there,

I am trying to delete an instance (54.241.175.235/) previously created using Launchpad and am facing the same issue described here. Would you be able to support in deleting the instance?

Many thanks,

Lucas

@heather.benoit

Hi, @l.carstens

I've tracked down the issue you're having, and it definitely appears to be an invalid/expired key. I have deleted the record in the Launchpad database, so you should not be able to access this instance anymore. Before creating a new cluster, would you please verify the following steps on your AWS account to ensure the old cluster is destroyed:

• Note UUID = d0d701c7-145d-4f4d-912c-b45c2dcc6b67
• Find the instance with the corisponding UUID in the ssh key name.
• Make note of the vpc id (eg: vpc-123456)
• Terminate the 3 instances.
• Delete the VPC - This will delete all networking components
• Delete the EIP
• Delete the S3 bucket with the corresponding cluster UUID.

This should ensure you have a clean space for a new cluster.

Thanks,

Tad