Problem

The error (Access denied) when calling the AssumeRole operation is returned when attempting to install an AWS StackPack instance with use-role set for the Access Key ID and Secret Access Key.

Cause

When use-role is specified, the AWS StackPack instance will attempt to assume the IAM role attached to the node-group that contains nodes running the pods stackstate-api and stackstate-server. This role will be used to retrieve metrics from CloudWatch. If the correct policy is not attached to the role, the (Access denied) when calling the AssumeRole operation error will be returned.

Solution

To resolve the error:

1. Click UNINSTALL to uninstall the StackPack instance reporting the error.
2. Set up the IAM role for the StackState EKS node-group that contains nodes running the pods stackstate-api and stackstate-server. The name of the node-group that should have the policy attached is included in the error message given.
3. Install the AWS StackPack again.