AWS Batch cannot determine region of bucket

[shasha (Shake Systems)]

I need to create a new Compute Environment in AWS Batch but it says that it cannot determine region of bucket. Can you help please?

[mribeirodantas (Marcel Ribeiro-Dantas)]

Does the “sequera-virginia-e1” bucket really exist? Seqera has no u, so maybe it’s a typo?

[shasha (Shake Systems)]

@mribeirodantas, yes I created this bucket in aws.

[matteofiandesio]

@shasha Can you test if the credentials have proper access to the bucket by using the s3 cli? It could be a credential problem.
When you start filling the form of the CE creation does the bucket appear in the autocomplete list?

[shasha (Shake Systems)]

@matteofiandesio @mribeirodantas thanks for your comments and hints.
I added this extra inline policy to the IAM user and this fixed the issue.
It works now.
I hope this helps someone else.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "TowerLaunch0",
			"Effect": "Allow",
			"Action": [
				"ssm:GetParameters",
				"s3:Get*",
				"s3:List*",
				"batch:DescribeJobQueues",
				"batch:CancelJob",
				"batch:SubmitJob",
				"batch:ListJobs",
				"batch:TagResource",
				"batch:DescribeComputeEnvironments",
				"batch:TerminateJob",
				"batch:DescribeJobs",
				"batch:RegisterJobDefinition",
				"batch:DescribeJobDefinitions",
				"ecs:DescribeTasks",
				"ec2:DescribeInstances",
				"ec2:DescribeInstanceTypes",
				"ec2:DescribeInstanceAttribute",
				"ecs:DescribeContainerInstances",
				"ec2:DescribeInstanceStatus",
				"ec2:DescribeImages",
				"logs:Describe*",
				"logs:Get*",
				"logs:List*",
				"logs:StartQuery",
				"logs:StopQuery",
				"logs:TestMetricFilter",
				"logs:FilterLogEvents",
				"ses:SendRawEmail"
			],
			"Resource": "*"
		}
	]
}