Unable to create a workspace

[Niko1]

Noel Nosse <nnosse@my.wgu.edu>	9:03 PM (0 minutes ago)
to Databricks

To complete a tutorial requires a workspace. The directions for the quickstart are outdated and do not match AWS. AWS has their own guide but cloudformation requires email and password. However databriscks no longer allows email and password. I tried to create a token, but Databricks does not allow a token to be created until there is an existing workspace!  I then tried the manual set up as I am familiar with AWS, but only get the following error: "0: M, 1: A, 2: L, 3: F, 4: O, 5: R, 6: M, 7: E, 8: D, 9: _, 10: R, 11: E, 12: Q, 13: U, 14: E, 15: S, 16: T, 17: :, 18: , 19: F, 20: a, 21: i, 22: l, 23: e, 24: d, 25: , 26: s, 27: t, 28: o, 29: r, 30: a, 31: g, 32: e, 33: , 34: c, 35: o, 36: n, 37: f, 38: i, 39: g, 40: u, 41: r, 42: a, 43: t, 44: i, 45: o, 46: n, 47: , 48: v, 49: a, 50: l, 51: i, 52: d, 53: a, 54: t, 55: i, 56: o, 57: n, 58: , 59: c, 60: h, 61: e, 62: c, 63: k, 64: s, 65: :, 66: , 67: L, 68: i, 69: s, 70: t, 71: ,, 72: P, 73: u, 74: t, 75: ,, 76: P, 77: u, 78: t, 79: W, 80: i, 81: t, 82: h, 83: B, 84: u, 85: c, 86: k, 87: e, 88: t, 89: O, 90: w, 91: n, 92: e, 93: r, 94: F, 95: u, 96: l, 97: l, 98: C, 99: o, 100: n, 101: t, 102: r, 103: o, 104: l, 105: ,, 106: D, 107: e, 108: l, 109: e, 110: t, 111: e"

[Niko1]

"FAILED REQUEST:, failed storage configuration validation checks: List Put Bucket Owner Full Control, Put With Bucket Owner Preferred, Delete Without Bucket Owner Preferred, Delete Without Bucket Owner Full Control, Delete Without Bucket Owner Preferred, Delete Without Bucket Owner Full Control."

[Niko1]

Updated the policy from Databricks Docs and still fails: 

{

"Version": "2012-10-17",

"Statement": [

{

"Sid": "Stmt1403287045000",

"Effect": "Allow",

"Action": [

"ec2:AllocateAddress",

"ec2:AssignPrivateIpAddresses",

"ec2:AssociateDhcpOptions",

"ec2:AssociateIamInstanceProfile",

"ec2:AssociateRouteTable",

"ec2:AttachInternetGateway",

"ec2:AttachVolume",

"ec2:AuthorizeSecurityGroupEgress",

"ec2:AuthorizeSecurityGroupIngress",

"ec2:CancelSpotInstanceRequests",

"ec2:CreateDhcpOptions",

"ec2:CreateFleet",

"ec2:CreateInternetGateway",

"ec2:CreateLaunchTemplate",

"ec2:CreateLaunchTemplateVersion",

"ec2:CreateNatGateway",

"ec2:CreateRoute",

"ec2:CreateRouteTable",

"ec2:CreateSecurityGroup",

"ec2:CreateSubnet",

"ec2:CreateTags",

"ec2:CreateVolume",

"ec2:CreateVpc",

"ec2:CreateVpcEndpoint",

"ec2:DeleteDhcpOptions",

"ec2:DeleteFleets",

"ec2:DeleteInternetGateway",

"ec2:DeleteLaunchTemplate",

"ec2:DeleteLaunchTemplateVersions",

"ec2:DeleteNatGateway",

"ec2:DeleteRoute",

"ec2:DeleteRouteTable",

"ec2:DeleteSecurityGroup",

"ec2:DeleteSubnet",

"ec2:DeleteTags",

"ec2:DeleteVolume",

"ec2:DeleteVpc",

"ec2:DeleteVpcEndpoints",

"ec2:DescribeAvailabilityZones",

"ec2:DescribeFleetHistory",

"ec2:DescribeFleetInstances",

"ec2:DescribeFleets",

"ec2:DescribeIamInstanceProfileAssociations",

"ec2:DescribeInstanceStatus",

"ec2:DescribeInstances",

"ec2:DescribeInternetGateways",

"ec2:DescribeLaunchTemplates",

"ec2:DescribeLaunchTemplateVersions",

"ec2:DescribeNatGateways",

"ec2:DescribePrefixLists",

"ec2:DescribeReservedInstancesOfferings",

"ec2:DescribeRouteTables",

"ec2:DescribeSecurityGroups",

"ec2:DescribeSpotInstanceRequests",

"ec2:DescribeSpotPriceHistory",

"ec2:DescribeSubnets",

"ec2:DescribeVolumes",

"ec2:DescribeVpcs",

"ec2:DetachInternetGateway",

"ec2:DisassociateIamInstanceProfile",

"ec2:DisassociateRouteTable",

"ec2:GetLaunchTemplateData",

"ec2:GetSpotPlacementScores",

"ec2:ModifyFleet",

"ec2:ModifyLaunchTemplate",

"ec2:ModifyVpcAttribute",

"ec2:ReleaseAddress",

"ec2:ReplaceIamInstanceProfileAssociation",

"ec2:RequestSpotInstances",

"ec2:RevokeSecurityGroupEgress",

"ec2:RevokeSecurityGroupIngress",

"ec2:RunInstances",

"ec2:TerminateInstances",

"sts:AssumeRole",

"s3:*"

],

"Resource": [

"*",

"*"

]

},

{

"Effect": "Allow",

"Action": [

"iam:CreateServiceLinkedRole",

"iam:PutRolePolicy"

],

"Resource": "arn:aws:iam::*:role/aws-service-role/spot.amazonaws.com/AWSServiceRoleForEC2Spot",

"Condition": {

"StringLike": {

"iam:AWSServiceName": "spot.amazonaws.com"

}

}

},

{

"Effect": "Allow",

"Action": [

"s3:ListBucket",

"s3:PutObject",

"s3:DeleteObject",

"s3:PutBucketAcl",

"s3:PutBucketPolicy",

"s3:PutObjectAcl"

],

"Resource": [

"arn:aws:s3:::*",

"arn:aws:s3:::*/*"

]

},

{

"Effect": "Allow",

"Action": [

"s3:ListBucket",

"s3:PutObject",

"s3:DeleteObject",

"s3:PutBucketAcl",

"s3:PutBucketPolicy",

"s3:PutObjectAcl"

],

"Resource": [

removed

]

}

]

}

[Niko1]

Now I get: Redirecting to: https://accounts.cloud.databricks.com/login/password?next_url=%2Fapi%2F2.