AWS CVO のデプロイが PutEncryptionConfiguration 権限エラーで失敗する
環境
- NetApp Console
- Cloud Volumes ONTAP（CVO）
- Amazon Web Services (AWS)
問題
NetApp Consoleの監査で検出された障害
{"_failure": "User: arn:aws:sts::xxxxx:assumed-role/IAMROLENAME/AssumeRole is not authorized to perform: s3:PutEncryptionConfiguration on resource: \"arn:aws:s3:::fabric-pool-xxxxxx\" because no identity-based policy allows the s3:PutEncryptionConfiguration action (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: xxxx; S3 Extended Request ID: xxxx=; Proxy: proxy.com)","bucketName": "fabric-pool-xxxx","kmsArn": "arn:aws:kms:us-east-1:xxxx:key/xxxxx","region": "us-east-1"}