title: "jhipster aws" Error: not authorized to perform: iam:GetInstanceProfile on resource: instance profile aws-elasticbeanstalk-ec2-role
body: <p>I run <code>jhipster aws</code> in my project folder and I answer the prompts.  </p>
  
  <pre><code>C:\AWSworkspace\jhaws&gt;jhipster aws  
  INFO! Using JHipster version installed locally in current project's node_modules  
  INFO! Executing jhipster:aws  
  INFO! Options: from-cli: true  
  ? Application name: jhaws   
  ? Environment name: jhaws-env  
  ? Name of S3 bucket: jhaws  
  ? Database name: jhaws  
  ? Database username: jhawsadmin  
  ? Database password: [hidden]  
  ? On which EC2 instance type do you want to deploy? t2.micro  
  ? On which RDS instance class do you want to deploy? db.t2.micro  
  ? On which region do you want to deploy? us-east-1  
  Building application  
  </code></pre>
  
  <p>This creates the S3 bucket, uploads the jar, creates the database, and brings up the database, but when it gets to <code>Verifying ElasticBeanstalk Roles</code> I get the message:</p>
  
  <pre><code>Verifying ElasticBeanstalk Roles  
  Error: User: arn:aws:iam::173874802293:user/progaccess is not authorized to perform: iam:GetInstanceProfile on resource: instance profile aws-elasticbeanstalk-ec2-role  
      at Environment.error (C:\AWSworkspace\jhaws\node_modules\yeoman-environment\lib\environment.js:176:40)  
      at module.exports.error (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\generator-base.js:1448:18)  
      at iam.verifyRoles.err (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\aws\index.js:228:30)  
      at hasInstanceRole.then.then.then.then.then.then.catch.err (C:\AWSworkspace\jhaws\node_modules\generator-jhipster\generators\aws\lib\iam.js:214:13)  
      at process._tickCallback (internal/process/next_tick.js:68:7)  
  </code></pre>
  
  <p>The user, <code>progaccess</code>, gets its permissions from the <code>progaccess</code> group. These are the permissions:  </p>
  
  <pre><code>AWSCodeCommitFullAccess  
  IAMSelfManageServiceSpecificCredentials  
  AWSElasticBeanstalkWebTier  
  AWSElasticBeanstalkFullAccess  
  AWSElasticBeanstalkMulticontainerDocker  
  AmazonRDSDataFullAccess  
  AWSElasticBeanstalkWorkerTier  
  </code></pre>
  
  <p>I have added the permissions that are listed for the <code>aws-elasticbeanstalk-ec2-role</code> role so I don't know what permissions I am missing. Thanks.</p>