Can't Scan Alexa Provided DynamoDB Table

0

When I do a scan on the free tables that we get as alexa developers, I get this error:

botocore.exceptions.ClientError: An error occurred (AccessDeniedException) when calling the Scan operation: User: arn:aws:sts::952997128153:assumed-role/AlexaHostedSkillLambdaRole/6171c245-a39d-4b6d-90d5-52bed7461435 is not authorized to perform: dynamodb:Scan on resource: arn:aws:dynamodb:us-east-1:952997128153:table/6171c245-a39d-4b6d-90d5-52bed7461435 because no identity-based policy allows the dynamodb:Scan action

But, I do not have access to create identity based policies for those tables.

1개 답변
1

DynamoDB does not use resource based access control, therefore, you will have to add the necessary permissions to your user role arn:aws:sts::952997128153:assumed-role/AlexaHostedSkillLambdaRole. Adding something like the following:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "MyPolicy",
            "Effect": "Allow",
            "Action": [
                "dynamodb:Scan"
            ],
            "Resource": "arn:aws:dynamodb:us-east-1:952997128153:table/<YourTableName>"
        }
    ]
}

If you do not have permission to add policy to an IAM role, then you should reach out to your accounts admin to do so.

Further info: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/using-identity-based-policies.html

profile pictureAWS
전문가
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠