Passer au contenu
En utilisant AWS re:Post, vous acceptez les AWS re:Post Conditions d’utilisation
AWS re:Postre:Post
À propos de re:Post

User is not is authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

1

Hi,

i want to apply for accessing Bedrock Claude models but i get the error: • Claude 3.5 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Claude 3 Haiku - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed English - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy • Embed Multilingual - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not authorized to perform: aws-marketplace:Subscribe on resource: * with an explicit deny in a service control policy

I know that i dont have the access rights, but how can i get them? Is this something my AWS admin of my company has to do or is ist an aws thing?

Thanks in advanced Best Regards Christoph

Sujets
Gestion et gouvernanceMachine Learning et AISécurité, identité et conformitéL’IA générative sur AWS
Balises
Politique de contrôle des servicesInterface à ligne de commande AWSPolitiques IAMSécurité, identité et conformitéAmazon Bedrock
Langue
English
demandé il y a 9 mois1,1 k vues
1 réponse
1
Réponse acceptée

Hello.

As stated in the error message, it looks like your SCP is explicitly set to deny "aws-marketplace:Subscribe".
If you are not the organization administrator for the AWS account, you will need to ask an organization administrator to modify the SCP.
Any changes to SCPs must be made in the AWS Organizations management account.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

EXPERT
répondu il y a 9 mois
EXPERT
vérifié il y a 9 mois
EXPERT
vérifié il y a 9 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Contenus pertinents