could not create volume in EC2

could not create volume in EC2: WebIdentityErr: failed to retrieve credentials caused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity status code: 403, request id: bbc8e0c0-74f9-46cb-a36c-b8351e8e0e75

(combined from similar events): failed to provision volume with StorageClass "gp2": rpc error: code = Internal desc = Could not create volume "pvc-641db932-4715-4f5a-b2d2-9c0c4117dd27": could not create volume in EC2: WebIdentityErr: failed to retrieve credentials caused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity status code: 403, request id: 6bc69eb4-96a6-4167-b5e3-1234567890

EBS CSI

failed to provision volume with StorageClass "gp2": rpc error: code = Internal desc = Could not create volume "pvc-7d80941a-d442-48fe-b26f-123456789": could not create volume in EC2: UnauthorizedOperation: You are not authorized to perform this operation. Encoded authorization failure message

See also

• Amazon EBS CSI driver: aws-ebs-csi-driver, ebs_csi_irsa_role, ebs-csi-controller, ebs-csi-node
• Kubernetes Persistent Volume Claim (PVC) (kind: PersistentVolumeClaim), Kubernetes Persistent volumes (PV) (kind: PersistentVolume), kubectl describe pvc, kubectl get pvc, ClaimLost, ProvisioningSucceeded, PV access control