Permission issues while creating knowledge base in bedrock

Question

Hi am getting permission issues while creating knowledge base in bedrock.

Error
Knowledge base: kb-influencer-test was failed to create. undefined User: arn:aws:iam::1234:user/xxxx@gmail.com is not authorized to perform: iam:CreatePolicyVersion on resource: policy AmazonBedrockS3PolicyForKnowledgeBase_xyz because no identity-based policy allows the iam:CreatePolicyVersion action

Following is the inline policy that is attached to the user.
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "iam:CreatePolicy",
                "iam:CreatePolicyVersion",
                "iam:PassRole",
                "iam:GetPolicy",
                "iam:GetPolicyVersion",
                "iam:AttachRolePolicy"
            ],
            "Resource": "arn:aws:iam::1234:policy/AmazonBedrockS3PolicyForKnowledgeBase_xyz"
        }
    ]
}

Any pointers would be appreciated.

Riku_Kobayashi · Answer

Hello.

Please try changing the ARN set in the IAM policy as follows.  
```
arn:aws:iam:::policy/service-role/AmazonBedrockS3PolicyForKnowledgeBase_xyz
```

I checked in my AWS account, and the IAM policy created in the Bedrock knowledge base has the ARN shown above.  
![a](/media/postImages/original/IM-0xp9yNjRJCuljyfxm6FLQ)

Permission issues while creating knowledge base in bedrock

답변 추가

관련 콘텐츠