Cannot create Glue Crawlers/Jobs due to Account denied access.

Question

Hello, I cannot create Glue Crawlers/Jobs because of following error: ![Enter image description here](/media/postImages/original/IMlk0MoDL9TP-dKyezp195gw)

Also I tried to do it programatically and received the following error:

```
{
  "service":"AWSGlue",
  "statusCode":400,
  "errorCode":"AccessDeniedException",
  "requestId":"75664b50-a0ba-4fbb-8669-e2d4e9abbe93",
  "errorMessage":"Account 12345679000 is denied access.", "type":"AwsServiceError"
}
```
- Couple of months ago everything worked fine. 
- I use `Administrator` role so I would exclude IAM problems. 
- I am using `eu-central-1` region.

Having searched for similar issues and proposed solutions ([similar post](https://www.repost.aws/questions/QU7wLjCe0rR_Wp5VFgVKTIbg/unable-to-run-create-glue-job-from-root-user-getting-access-denied-exception)), I tried to contact AWS Support twice from the account where this happens and I was told that I need to upgrade my support plan to get technical support. Basically I cannot use this service and do I have to upgrade support plan to get it unlocked or at least provided the reason why it is blocked?

I will appreciate any help. Thanks!

Answer

hello there, I had same error like you

already add these policy to my role
![role policy](/media/postImages/original/IMyMOLvfJ1SgusoPeg03k4DA)

but, it still can't create crawler

Answer

I tried with different user and with following policies attached directly to the user and I still get the same error. 
![Enter image description here](/media/postImages/original/IMh38CVCRwRHGrakF7gSeanA)
Maybe there are some other policies that needs to be added, I am not sure.

Answer

I had the same problem with the crawler creation on a newly created account, and I think the problem was in incomplete account verification process. The hint was in the error when I'v tried to use cloud shell, then error stated that my new account was not verified, and I needed to contact the AWS support. After the support completed the verification, I was able to create crawler jobs and access cloud shell.

Cannot create Glue Crawlers/Jobs due to Account denied access.

Contenus pertinents