# Elastic engine 403 permission error **URL:** \ **Category:** Uncategorized\ **Created:** [March 3, 2022, 11:55pm UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820 "2022-03-03T23:55:21Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![elontsi](https://avatars.discourse-cdn.com/v4/letter/e/49beb7/32.png) [@elontsi](https://community.dremio.com/u/elontsi)\ **Post date:** [March 3, 2022, 11:55pm UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820/1 "2022-03-03T23:55:21Z")
Hello, I am getting the below error when i try to launch a new engine in dremio aws 2022-03-03 23:04:24,349 [qtp1296910502-17418] ERROR c.d.d.server.GenericExceptionMapper - Unexpected exception when processing POST [http://10.195.46.50:9047/apiv2/provision/cluster](http://10.195.46.50:9047/apiv2/provision/cluster) : software.amazon.awssdk.services.ec2.model.Ec2Exception: You are not authorized to perform this operation. (Service: Ec2, Status Code: 403, Request ID: ba5c827a-96ad-41a3-badf-abb45ef84df9, Extended Request ID: null) software.amazon.awssdk.services.ec2.model.Ec2Exception: You are not authorized to perform this operation. (Service: Ec2, Status Code: 403, Request ID: ba5c827a-96ad-41a3-badf-abb45ef84df9, Extended Request ID: null) at software.amazon.awssdk.core.internal.http.CombinedResponseHandler.handleErrorResponse(CombinedResponseHandler.java:123) at software.amazon.awssdk.core.internal.http.CombinedResponseHandler.handleResponse(CombinedResponseHandler.java:79) at software.amazon.awssdk.core.internal.http.CombinedResponseHandler.handle(CombinedResponseHandler.java:59) at software.amazon.awssdk.core.internal.http.CombinedResponseHandler.handle(CombinedResponseHandler.java:40) at software.amazon.awssdk.core.internal.http.pipeline.stages.HandleResponseStage.execute(HandleResponseStage.java:40) at software.amazon.awssdk.core.internal.http.pipeline.stages.HandleResponseStage.execute(HandleResponseStage.java:30) at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallAttemptTimeoutTrackingStage.execute(ApiCallAttemptTimeoutTrackingStage.java:73) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallAttemptTimeoutTrackingStage.execute(ApiCallAttemptTimeoutTrackingStage.java:42) at software.amazon.awssdk.core.internal.http.pipeline.stages.TimeoutExceptionHandlingStage.execute(TimeoutExceptionHandlingStage.java:78) at software.amazon.awssdk.core.internal.http.pipeline.stages.TimeoutExceptionHandlingStage.execute(TimeoutExceptionHandlingStage.java:40) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallAttemptMetricCollectionStage.execute(ApiCallAttemptMetricCollectionStage.java:50) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallAttemptMetricCollectionStage.execute(ApiCallAttemptMetricCollectionStage.java:36) at software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:64) at software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:34) at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206) at software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:56) at software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:36) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.executeWithTimer(ApiCallTimeoutTrackingStage.java:80) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:60) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:42) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:48) at software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:31) at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206) at software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206) at software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:37) at software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:26) Does anyone have a solution to this?? I updated my role to give it every EC2 permission but i still get the error. Any help would be gladly appreciated. ---
**Author:** ![balaji.ramaswamy](https://sea2.discourse-cdn.com/flex020/user_avatar/community.dremio.com/balaji.ramaswamy/32/843_2.png) [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)\ **Post date:** [March 4, 2022, 2:29am UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820/2 "2022-03-04T02:29:57Z")
@elontsi Welcome to the Dremio community, Have you tried the below? > **[Encoded authorization failure with RunInstances in Amazon EC2](https://aws.amazon.com/premiumsupport/knowledge-center/ec2-not-auth-launch/)** Thanks Bali ---
**Author:** ![elontsi](https://avatars.discourse-cdn.com/v4/letter/e/49beb7/32.png) [@elontsi](https://community.dremio.com/u/elontsi)\ **Post date:** [March 4, 2022, 2:54am UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820/3 "2022-03-04T02:54:11Z")
Thanks @balaji.ramaswamy, i am getting that message in the dremio url or when i look at dremio logs on the server. It does not give me the encoded message on there. ---
**Author:** ![elontsi](https://avatars.discourse-cdn.com/v4/letter/e/49beb7/32.png) [@elontsi](https://community.dremio.com/u/elontsi)\ **Post date:** [March 4, 2022, 2:59am UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820/4 "2022-03-04T02:59:22Z")
Is there any permissions we need to add to the default permission created when deploying the Dremio cloudformation stack? ---
**Author:** ![balaji.ramaswamy](https://sea2.discourse-cdn.com/flex020/user_avatar/community.dremio.com/balaji.ramaswamy/32/843_2.png) [@balaji.ramaswamy](https://community.dremio.com/u/balaji.ramaswamy)\ **Post date:** [March 4, 2022, 3:14am UTC](https://community.dremio.com/t/elastic-engine-403-permission-error/8820/5 "2022-03-04T03:14:46Z")
@elontsi Are you able to install the CLI and follow the steps to see the encoded messages?