topic Why does Databricks need ec2:CreateTags and ec2:DeleteTags permissions in the cross-account IAM role? in Administration & Architecture https://community.databricks.com/t5/administration-architecture/why-does-databricks-need-ec2-createtags-and-ec2-deletetags/m-p/22766#M97 Thu, 20 Mar 2025 16:44:43 GMT MoJaMa 2025-03-20T16:44:43Z Why does Databricks need ec2:CreateTags and ec2:DeleteTags permissions in the cross-account IAM role? https://community.databricks.com/t5/administration-architecture/why-does-databricks-need-ec2-createtags-and-ec2-deletetags/m-p/22766#M97 Thu, 20 Mar 2025 16:44:43 GMT https://community.databricks.com/t5/administration-architecture/why-does-databricks-need-ec2-createtags-and-ec2-deletetags/m-p/22766#M97 MoJaMa 2025-03-20T16:44:43Z Re: Why does Databricks need ec2:CreateTags and ec2:DeleteTags permissions in the cross-account IAM role? https://community.databricks.com/t5/administration-architecture/why-does-databricks-need-ec2-createtags-and-ec2-deletetags/m-p/22767#M98 <P>These permissions are one of the list described here in Step 6.c</P><P><A href="https://docs.databricks.com/administration-guide/account-api/iam-role.html" target="test_blank">https://docs.databricks.com/administration-guide/account-api/iam-role.html</A></P><P></P><P>It is required because we use tags to identify the owners, and other minimum information, of clusters on AWS. It is not possible to remove these permissions.</P> Fri, 18 Jun 2021 15:16:19 GMT https://community.databricks.com/t5/administration-architecture/why-does-databricks-need-ec2-createtags-and-ec2-deletetags/m-p/22767#M98 MoJaMa 2021-06-18T15:16:19Z