amazon q에 학습셋 데이터를 동기화 시킬려고 하는데 계속 Access denied when calling Amazon Q BatchPutDocument API. 이 오류가 나오네요.

0

사용하고 있는 역할 입니다 AmazonKendraFullAccess AmazonQFullAccess AmazonS3FullAccess AmazonS3OutpostsFullAccess AmazonS3ReadOnlyAccess CloudWatchLogsFullAccess 어떻게 해야 할까요?

hae
gefragt vor 2 Monaten54 Aufrufe
1 Antwort
0
Akzeptierte Antwort

안녕하세요.

BatchPutDocument는 "AmazonQFullAccess"에 포함되어 있지 않습니다.
Amazon Q Business 정책이므로 다음과 같이 정책을 추가해 주시기 바랍니다.
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonqbusiness.html

{
  "Version" : "2012-10-17",
  "Statement" : [
    {
      "Sid" : "test",
      "Effect" : "Allow",
      "Action" : [
        "qbusiness:BatchPutDocument"
      ],
      "Resource" : "*"
    }
  ]
}

다음 문서에 명시된 정책이 참고가 되리라 생각합니다.
https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/iam-roles.html#iam-roles-ds

{
    "Version": "2012-10-17",
    "Statement": [{
            "Sid": "AllowsAmazonQToIngestDocuments",
            "Effect": "Allow",
            "Action": [
                "qbusiness:BatchPutDocument",
                "qbusiness:BatchDeleteDocument"
            ],
            "Resource": "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}/index/{{index_id}}"
        },
        {
            "Sid": "AllowsAmazonQToIngestPrincipalMapping",
            "Effect": "Allow",
            "Action": [
                "qbusiness:PutGroup",
                "qbusiness:CreateUser",
                "qbusiness:DeleteGroup",
                "qbusiness:UpdateUser",
                "qbusiness:ListGroups"
            ],
            "Resource": [
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}",
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}/index/{{index_id}}",
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}/index/{{index_id}}/data-source/*"
            ]
        }
    ]
}
profile picture
EXPERTE
beantwortet vor 2 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen