{"action":"opened","issue":{"url":"https://api.github.com/repos/awslabs/cfncluster/issues/28","labels_url":"https://api.github.com/repos/awslabs/cfncluster/issues/28/labels{/name}","comments_url":"https://api.github.com/repos/awslabs/cfncluster/issues/28/comments","events_url":"https://api.github.com/repos/awslabs/cfncluster/issues/28/events","html_url":"https://github.com/awslabs/cfncluster/issues/28","id":64360316,"number":28,"title":"cluster creation requires IAM permissions","user":{"login":"dkoppstein","id":10901251,"avatar_url":"https://avatars.githubusercontent.com/u/10901251?v=3","gravatar_id":"","url":"https://api.github.com/users/dkoppstein","html_url":"https://github.com/dkoppstein","followers_url":"https://api.github.com/users/dkoppstein/followers","following_url":"https://api.github.com/users/dkoppstein/following{/other_user}","gists_url":"https://api.github.com/users/dkoppstein/gists{/gist_id}","starred_url":"https://api.github.com/users/dkoppstein/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkoppstein/subscriptions","organizations_url":"https://api.github.com/users/dkoppstein/orgs","repos_url":"https://api.github.com/users/dkoppstein/repos","events_url":"https://api.github.com/users/dkoppstein/events{/privacy}","received_events_url":"https://api.github.com/users/dkoppstein/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-03-25T20:01:51Z","updated_at":"2015-03-25T20:01:51Z","closed_at":null,"body":"This is specific to my AWS IAM privileges, but I get the following when I try to create a cluster: \r\n\r\nDavids-MacBook-Pro:~ dkoppstein$ cfncluster status dkoppstein-cfncluster\r\nStatus: ROLLBACK_COMPLETE\r\n2015-03-25 15:41:44.703000 CREATE_FAILED AWS::EC2::SecurityGroup MasterSecurityGroup Resource creation cancelled\r\n2015-03-25 15:41:30.679000 CREATE_FAILED AWS::DynamoDB::Table DynamoDBTable Resource creation cancelled\r\n2015-03-25 15:41:30.596000 CREATE_FAILED AWS::EC2::EIP MasterEIP Resource creation cancelled\r\n2015-03-25 15:41:30.593000 CREATE_FAILED AWS::EC2::Volume SharedVolume Resource creation cancelled\r\n2015-03-25 15:41:29.187000 CREATE_FAILED AWS::IAM::Role RootRole API: iam:CreateRole User: arn:aws:iam::643571691154:user/davidk is not authorized to perform: iam:CreateRole on resource: arn:aws:iam::643571691154:role/cfncluster-dkoppstein-cfncluster-RootRole-TTPCGJFH359D\r\n\r\nElasticluster and StarCluster both do not require CreateRole on a root resource; it'd be nice if cfncluster didn't require it, too. "}}