how come i can't access the aws polly that should have been granted to my iam's user group permissions

my friend is paying for amazon polly but he's trying to give me access through an iam user, he created an iam for me to be able to login, which we've done. i am now able to login to aws console using the iam user credentials, even changed the password but i still dont have access to the aws polly product: getting this error:

Warning
You don't have the IAM permissions necessary to perform this operation. Learn more about permissions.

he added me to a user group with the polly full access and s3 full access

it was suggested from the community aws discord to visit cloudtrail to see if there is some specific permission that generating the error, but when my friend visits this products page and clicks on event history it just lists out records of my iam user logging in, and nothing about me trying to access the aws polly product or s3

トピック

セキュリティ、アイデンティティ、コンプライアンス機械学習と AI 管理とガバナンス

タグ

セキュリティ、アイデンティティ、コンプライアンス AWS Identity and Access Management Amazon Polly AWS アカウントマネジメント IAM ポリシー

言語

English

greg

質問済み 8ヶ月前353ビュー

2回答

新しい順
投票が多い順
コメントが多い順

これらの回答は役に立ちましたか？コミュニティがあなたの知識を活用できるように、正解に賛成票を投じてください。

承認された回答

figured it out, it was being restricted by a permission boundary that we were fiddling with when trying to grant permissions

greg

回答済み 8ヶ月前

Hello.

If I grant temporary Administrator access, will I be able to access it?
Also, have you attached the policy to the correct IAM group?
I have confirmed that I can operate Amazon Polly in my environment by logging in with an IAM group configured for "AmazonPollyFullAccess".
https://docs.aws.amazon.com/polly/latest/dg/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-console

エキスパート

Riku_Kobayashi

回答済み 8ヶ月前

greg
8ヶ月前
ty for helping :)

we just tried your suggestion of giving both my iam a direct administrator access and to the user group so when i checks my user through the iam console it says my iam user has administrator access both directly and the through group but same issue

he only has created one user group so I doubt it is wrong. but i can't verify it through my iam's access perissions, although it does say that i should have it from his end

how come i can't access the aws polly that should have been granted to my iam's user group permissions

関連するコンテンツ