Use this troubleshooting guide when you encounter issues while working with DAY2™ Managed Instance.


When you receive "missing key AWS Permissions" error while trying to access remote console session history of an instance

Check to see if the following AWS IAM permissions exist in the instance profile, else attach the below policy to the instance profile.
{

    "Version": "2012-10-17",

    "Statement": [

        {

            "Action": [

                "ssmmessages:CreateControlChannel",

                "ssmmessages:CreateDataChannel",

                "ssmmessages:OpenControlChannel",

                "ssmmessages:OpenDataChannel",

                "ssm:UpdateInstanceInformation"

            ],

            "Resource": "*",

            "Effect": "Allow"

        },

        {

            "Action": [

                "s3:PutObject"

            ],

            "Resource": "arn:aws:s3:::montycloud-inventorybucketdatasync-717930997628/AWS:SessionLogs/*",

            "Effect": "Allow"

        },

        {

            "Action": [

                "s3:Get*",

                "s3:List*"

            ],

            "Resource": "*",

            "Effect": "Allow"

        }

    ]

}