Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

To make a long story short, I'm using s3cmd to manipulate S3 buckets and have copied the access credentials over to my environments.yaml under a new "smlamazon" section, but this fails at bootstrap with access denied:

mitchy$ s3cmd ls
2013-11-08 18:49  s3://sml-juju
2012-11-27 14:38  s3://sml-public
2013-05-27 15:45  s3://sml-website-backups
mitchy$ juju bootstrap --constraints "cpu-power=0 mem=512M" -v
verbose is deprecated with the current meaning, use show-log
2013-11-08 18:53:53 INFO juju.environs open.go:156 environment info already exists; using New not Prepare
2013-11-08 18:53:53 INFO juju.provider.ec2 ec2.go:193 opening environment "smlamazon"
2013-11-08 18:53:54 ERROR juju supercommand.go:282 Access Denied

I essentially copied the "amazon" block and renamed it "smlamazon", and updated the access and secret keys (and s3 and admin secret) for it.

What am I missing?

share|improve this question
For the record I did remember to switch environments :-) – spacemonkey Nov 8 '13 at 19:08
Can you doublecheck to see if you have any files in .juju/environments/? I think blowing those away should fix your issue. (But not 100%) – Jorge Castro Nov 8 '13 at 23:45

Juju requires access to control an S3 bucket and EC2 instances. If your access credentials were keys generated from AWS IAM this may mean you did not add the correct access group policy to your security credentials. The following steps may be taken to grant this access key pair to provision your AWS infrastructure:

Access the IAM control Panel IAM control Panel - Add User

Obtain Access Key and Secret Access Key IAM Control Panel - Keys

Select User and set Policy Template IAM - Access Policy

Select EC2 Full Access and S3 Full Access EC2 Full Access S3 Full Access Note - If you are in a corporate environment, this may voilate access policy. You should check with your Administrator if you require segmented permissions to specific AZ's or custom access levels. This can be generated by your administrator, or by following the AWS IAM Policy tutorial.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.