Direkt zum Inhalt
Durch die Nutzung von AWS re:Post stimmt du den AWS re:Post Nutzungsbedingungen
AWS re:Postre:Post
Über re:Post

User is not is authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

1

Hi,

i want to apply for accessing Bedrock Claude models but i get the error: • Claude 3.5 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Haiku - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed English - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed Multilingual - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

I know that i dont have the access rights, but how can i get them? Is this something my AWS admin of my company has to do or is ist an aws thing?

Thanks in advanced Best Regards Christoph

Themen
Management & UnternehmensführungMaschinelles Lernen & KISicherheit, Identität & KonformitätGenerative KI auf AWS
Tags
Richtlinie zur DienstleistungskontrolleAWS BefehlszeilenschnittstelleIAM-RichtlinienSicherheit, Identität & KonformitätAmazon Bedrock
Sprache
English
gefragt vor 9 Monaten1109 Aufrufe
1 Antwort
1
Akzeptierte Antwort

Hello.

As stated in the error message, it looks like your SCP is explicitly set to deny "aws-marketplace:Subscribe".
If you are not the organization administrator for the AWS account, you will need to ask an organization administrator to modify the SCP.
Any changes to SCPs must be made in the AWS Organizations management account.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

EXPERTE
beantwortet vor 9 Monaten
EXPERTE
überprüft vor 9 Monaten
EXPERTE
überprüft vor 9 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Relevanter Inhalt