What Policy needs to be removed/added to be able to create an eb application?

Question

Amazon Web Services

Good afternoon!
The customer issued an access key ID and a secret access key in AWS
When I try to initialize the application through eb init, it shows the following error:

ERROR: NotAuthorizedError - Operation Denied. User: arn:aws:iam::123456789:user/[email protected] is not authorized to perform: elasticbeanstalk:CreateApplication on resource: arn:aws:elasticbeanstalk:eu-central-1:123456789
:application/my-app

I have rechecked the keys several times already, everything on my side should be correct.
Here is the list of Policies that the customer gave me.

Do I need AWSElasticBeanstalkReadOnly here at all?
I understand that AdministratorAccess-AWSElasticBeanstalk should give me all the basic rights to create the app.

Can you please tell me what is wrong with the permissions?

Answer 1

AdministratorAccess gives access to all the necessary resources, so either the customer confused something, or you mixed up the keys.
You can check if the user is the correct one with
aws iam get-user
and ask the customer to double check.

Answer 2

There might be a hint here somewhere:
https://aws.amazon.com/premiumsupport/knowledge-ce...