Saltar al contenido
Al usar AWS re:Post, aceptas las AWS re:Post Términos de uso
AWS re:Postre:Post
Acerca de re:Post

User is not is authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

1

Hi,

i want to apply for accessing Bedrock Claude models but i get the error: • Claude 3.5 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Haiku - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed English - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed Multilingual - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

I know that i dont have the access rights, but how can i get them? Is this something my AWS admin of my company has to do or is ist an aws thing?

Thanks in advanced Best Regards Christoph

Temas
Gestión y gobiernoAprendizaje automático e IASeguridad, identidad y cumplimientoIA generativa en AWS
Etiquetas
Política de control de serviciosAWS Command Line InterfacePolíticas de IAMSeguridad, identidad y cumplimientoAmazon Bedrock
Idioma
English
preguntada hace 9 meses1,2 mil visualizaciones
1 Respuesta
1
Respuesta aceptada

Hello.

As stated in the error message, it looks like your SCP is explicitly set to deny "aws-marketplace:Subscribe".
If you are not the organization administrator for the AWS account, you will need to ask an organization administrator to modify the SCP.
Any changes to SCPs must be made in the AWS Organizations management account.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

EXPERTO
respondido hace 9 meses
EXPERTO
revisado hace 9 meses
EXPERTO
revisado hace 9 meses

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Contenido relevante