Cloudformation DataZone: Unable to create Environment Profile

Question

I am trying to create a datazone environment profile through Cloudformation template, I was able to create datazone domain, project successfully through CFT. I have done Environment Blueprint Configuration(DefaultDataLake).
But I'm getting this error while creating the stack:

"Resource handler returned message: "User is not permitted to perform operation: CreateEnvironmentProfile (Service: DataZone, Status Code: 403, Request ID: b3c2a490-e597-4c51-939c-d5daa3bc74be)" (RequestToken: 4f4051fa-21e8-d5be-5252-fc1fb1c9cc76, HandlerErrorCode: AccessDenied)"

This is the template I'm using for creating the resource. Kindly suggest changes needed:

AdviceClientEnvironmentProfile:
    DependsOn: AdviceClientBlueprintConfig
    Type: AWS::DataZone::EnvironmentProfile
    Properties:
      AwsAccountId: !Ref AWS::AccountId
      AwsAccountRegion: us-east-1
      DomainIdentifier: !Ref AdviceDomain
      EnvironmentBlueprintIdentifier: DefaultDataLake
      Name: advice_environmentprofile
      ProjectIdentifier: advice_client

Sivaraman Selvam · Answer

Hello,

> The error message you are seeing, "User is not permitted to perform operation: CreateEnvironmentProfile (Service: DataZone, Status Code: 403)," indicates that the IAM role or user executing the CloudFormation stack does not have the necessary permissions to perform the CreateEnvironmentProfile operation.

To resolve this issue, you need to ensure that the IAM role or user running the CloudFormation stack has the necessary permissions, attach the IAM policy to the IAM role or user executing the CloudFormation stack.

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "datazone:CreateEnvironmentProfile",
        "datazone:GetEnvironmentProfile",
        "datazone:UpdateEnvironmentProfile",
        "datazone:DeleteEnvironmentProfile",
        "datazone:ListEnvironmentProfiles"
      ],
      "Resource": "*"
    }
  ]
}

```

Cloudformation DataZone: Unable to create Environment Profile

Aggiungi la tua risposta

Contenuto pertinente