This is an automated email from the ASF dual-hosted git repository. yaqian pushed a commit to branch kylin4_on_cloud in repository https://gitbox.apache.org/repos/asf/kylin.git
The following commit(s) were added to refs/heads/kylin4_on_cloud by this push: new e652b87aad minor fix (#1853) e652b87aad is described below commit e652b87aad1caea6cca60a82a3665bb4aec90403 Author: Yaqian Zhang <598593...@qq.com> AuthorDate: Mon Apr 11 11:26:22 2022 +0800 minor fix (#1853) --- readme/configuration.md | 2 +- readme/prerequisites.md | 16 +++++++++++++--- 2 files changed, 14 insertions(+), 4 deletions(-) diff --git a/readme/configuration.md b/readme/configuration.md index 52e0559e09..bda9b629e7 100644 --- a/readme/configuration.md +++ b/readme/configuration.md @@ -4,7 +4,7 @@ **Required parameters**: -- `AWS_REGION`: Current region for EC2 instances. Default is `cn-northwest-1`. +- `AWS_REGION`: Current region for EC2 instances. The default value is `cn-northwest-1`. - `IAMRole`: IAM role which has the access to aws authority. This parameter will be set to the created **name** of the IAM role. - `S3_URI`: the prefix path of storing `jars/scripts/tar`. For example, this parameter will be set to `s3://.../kylin4-aws-test`. - `KeyName`: Security key name is a set of security credentials that you use to prove your identity when connecting to an instance. This parameter will be set to the created **name** of key pair`. diff --git a/readme/prerequisites.md b/readme/prerequisites.md index 7d4ad0eeab..5296f281c9 100644 --- a/readme/prerequisites.md +++ b/readme/prerequisites.md @@ -4,7 +4,7 @@ #### 1. Login AWS account and check whether the current user has sufficient permissions in AWS IAM service - | + #### 2. Add permission for current user @@ -31,7 +31,7 @@ Users need the following permissions to ensure that subsequent operations can pr  -###### 3. Paste the following content to `Statement`: +###### 3. Paste the following content into the `[]` of `Statement`: ```json { @@ -154,6 +154,16 @@ Users need the following permissions to ensure that subsequent operations can pr "Effect": "Allow", "Action": "servicequotas:GetServiceQuota", "Resource": "*" + }, + { + "Effect": "Allow", + "Action": ["ssm:SendCommand"], + "Resource": ["arn:aws-cn:ssm:*:*:document/*"] + }, + { + "Effect": "Allow", + "Action": ["ssm:SendCommand"], + "Resource": ["arn:aws-cn:ec2:*:*:instance/*"] } ``` @@ -163,7 +173,7 @@ If there is a problem with the `JSON` here, you can manually add permissions in  -###### 5. Add the permission policy to current user: +###### 5. Add the permission policy just created to current user: 