Renovate App: Missing policy ec2:DescribeImages

[kayman-mk]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

No response

Please tell us more about your question or problem

Hi,

I am using the Renovate App with the aws_machine-image datasource. Unfortunately there is the ec2:DescribeImages policy missing, so the app is not allowed to fulfill the task. See logs below.

Any chance to update your infrastructure?

Best
Matthias

Logs (if relevant)

Logs

{
  "datasource": "aws-machine-image"
  "packageName": "[{\"Name\":\"owner-id\",\"Values\":[\"137112412989\"]},{\"Name\":\"name\",\"Values\":[\"amzn2-ami-hvm-*-x86_64-ebs\"]}]"
  "err": {
    "name": "UnauthorizedOperation",
    "$fault": "client",
    "$metadata": {
      "httpStatusCode": 403,
      "requestId": "039766fd-417c-4182-b272-ecc28a4bf830",
      "attempts": 1,
      "totalRetryDelay": 0
    },
    "Code": "UnauthorizedOperation",
    "message": "You are not authorized to perform this operation. User: arn:aws:sts::472613559203:assumed-role/codedeploy-ec2/i-039769b12c76e696c is not authorized to perform: ec2:DescribeImages because no identity-based policy allows the ec2:DescribeImages action",
    "stack": "UnauthorizedOperation: You are not authorized to perform this operation. User: arn:aws:sts::472613559203:assumed-role/codedeploy-ec2/i-039769b12c76e696c is not authorized to perform: ec2:DescribeImages because no identity-based policy allows the ec2:DescribeImages action\n    at throwDefaultError (/usr/local/renovate/node_modules/.pnpm/@smithy+smithy-client@3.4.2/node_modules/@smithy/smithy-client/dist-cjs/index.js:836:20)\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+smithy-client@3.4.2/node_modules/@smithy/smithy-client/dist-cjs/index.js:845:5\n    at de_CommandError (/usr/local/renovate/node_modules/.pnpm/@aws-sdk+client-ec2@3.658.1/node_modules/@aws-sdk/client-ec2/dist-cjs/index.js:15723:10)\n    at processTicksAndRejections (node:internal/process/task_queues:105:5)\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+middleware-serde@3.0.8/node_modules/@smithy/middleware-serde/dist-cjs/index.js:35:20\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+core@2.5.1/node_modules/@smithy/core/dist-cjs/index.js:168:18\n    at /usr/local/renovate/node_modules/.pnpm/@smithy+middleware-retry@3.0.25/node_modules/@smithy/middleware-retry/dist-cjs/index.js:320:38\n    at /usr/local/renovate/node_modules/.pnpm/@aws-sdk+middleware-logger@3.654.0/node_modules/@aws-sdk/middleware-logger/dist-cjs/index.js:34:22\n    at AwsMachineImageDatasource.getSortedAwsMachineImages (/usr/local/renovate/lib/modules/datasource/aws-machine-image/index.ts:90:28)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:134:20\n    at AwsMachineImageDatasource.getReleases (/usr/local/renovate/lib/modules/datasource/aws-machine-image/index.ts:141:20)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:134:20\n    at fetchReleases (/usr/local/renovate/lib/modules/datasource/index.ts:325:13)\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:140:56)\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at fetchDepUpdates (/usr/local/renovate/lib/workers/repository/process/fetch.ts:58:42)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:104:23\n    at /usr/local/renovate/node_modules/.pnpm/p-map@4.0.0/node_modules/p-map/index.js:57:22"
  }
}

DEBUG: Failed to look up aws-machine-image package [{"Name":"owner-id","Values":["137112412989"]},{"Name":"name","Values":["amzn2-ami-hvm-*-x86_64-ebs"]}]