Identifying Objects in Video Streams Using SageMaker - CFN template: S3 access denied

Have you updated the S3 bucket policy to allow the Amazon SageMaker service access to the bucket? Does the Amazon SageMaker service role have a policy which allows it access to your S3 bucket?

I'm logged in as a root user. Shouldn't I have AdministratorAccess? I refer to public template: https://docs.aws.amazon.com/kinesisvideostreams/latest/dg/examples-sagemaker.html Also, templates from other sources are available.

Also, when i'm trying to get bucket policy in CLI i get the same error. Is it possible, that this bucket isn't public?

Even while logged in as root (which I would also recommend that you not do), it is not like having administrator or sudo access in Windows/Linux. Many services and their resources, such as S3, have their own resource policies which may also require configuration to allow access to content stored in said resources (such as a bucket in this case).

On the bucket you need to allow the SageMaker service (assuming that's what's needing access) to S3 via a bucket policy (xhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/access-policy-language-overview.html).

Just to confirm, Are you as trying to run the Cloudformation templates in S3 (as a root user) from the Cloudformation console or are you trying to have SageMaker use templates in the S3 bucket?

My goal is to upload CFN template via templateURL=https://s3.eu-central-1.amazonaws.com/kvsit-eu-central-1/cfn-template.template.yml in CloudFormation console. And two errors occur. First one is: "You must specify a Stack ID. Displaying your Stacks page". And the second one: "S3 error: Access Denied". I've created s3 bucket role and added few permissions, related to Sagemaker and Kinesis. But it's still not working. I tried also to give full access, but it didn't help either. I doubt it's the problem with policies, because other templates are loading fine.