Can't create a Glue Crawler (AccessDenied)

Question

Having issues creating a Glue Crawler both via the console and through SAM. I can create other resources (S3 buckets, lambda functions, Glue DB...) but when I try to create the Crawler I get:

```
Account xxxxxx is denied access
```

I'm using the root account here (which has `AdministratorAccess`) and the IAM role I'm using to create the crawler has both `AmazonS3FullAccess` and `AWSGlueServiceRole`. I also tried in different regions (`eu-west-1`, `eu-west-2`, `eu-west-3` and `eu-central-1`) but same issues.

Any ideas? Cheers!

Answer

Hello.

If your AWS account is managed by Organizations, please check whether Glue operations are not denied by SCP.  
If you are not denied by SCP etc. and cannot operate as root user, there may be a problem with your AWS account, so I recommend that you open a case with AWS Support under "Account and billing".  
Inquiries under "Account and billing" can be made free of charge.  
https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

Can't create a Glue Crawler (AccessDenied)

Contenus pertinents