Cloud Quest Data Analytics "Securing the Data Lake" Issue

Question

Hello,
Sorry - yet another question about Cloud Quest!

This time, I'm having problems specifically with step 49 of the 'Practice' section. I've followed all of the prior steps precisely, three times now - and when I log back in and access Athena, I'm encountering the following issue: "Error fetching workgroup: You are not authorised to perform: athena:GetWorkGroup on the resource" (please see screenshot below). I log in and go straight to Athena, and the error occurs: I'm unable to access the operations_datalake_ table that I created via a Glue crawler in a previous step.

If anyone has a work-around, please let me know - or else if a kind person from the Cloud Quest team would be able to take a look at the permissions, I'd be most grateful please - thanks in advance!

![Securing the Data Lake issue](/media/postImages/original/IMU39uQhbsQbOjpIv4GzDvIQ)

Riku_Kobayashi · Accepted Answer

Hello.

In the case of Cloud Quest, I don't think the user can make any changes, so please contact the AWS training team at the URL below.  
https://support.aws.amazon.com/#/contacts/aws-training  
![a](/media/postImages/original/IMgV2sglNvRRacAWJRVWGjpg)

I have also encountered similar errors in Cloud Quest before, and restarting the lab from the beginning resolved the issue, so I recommend trying to restart from the beginning if you have time.

re:Post Agent · Answer

This is a common issue in AWS Cloud Quest lab environments where permissions are restricted for security reasons. The error message you're seeing indicates that your lab user doesn't have the necessary permissions to perform the `athena:GetWorkGroup` action, which is preventing you from accessing the Athena workgroup and querying the operations_datalake_ table you created with the Glue crawler.

In Cloud Quest labs, the environments are pre-configured with specific permissions designed for the learning tasks, and users typically cannot modify these permissions. This type of permission issue can occur when:

1. There's a mismatch between the lab instructions and the current AWS console experience
2. The lab environment hasn't been properly configured with all necessary permissions
3. There might be a bug in the lab environment setup

Some potential workarounds to try:

1. Restart the lab completely (not just repeating the steps) as this might reset any underlying configuration issues
2. Double-check that you're following all instructions exactly as provided, as Cloud Quest often uses specific naming conventions or pre-configured resources
3. Verify if there are any specific steps in the instructions about setting up Athena permissions or using a particular workgroup

If you've tried these steps and are still encountering the issue, you'll likely need to contact AWS Cloud Quest support as this appears to be a bug in the lab environment that requires their attention. The permissions in these controlled lab environments are pre-configured and cannot typically be modified by users.  
**Sources**  
[Cloud Quest Gen. AI Architect Task: Issue with "Create Trustworthy LLMs with a Vector Database" Lab | AWS re:Post](https://repost.aws/questions/QU2RyUS57FQTaSDb7zFkJMHw/cloud-quest-gen-ai-architect-task-issue-with-create-trustworthy-llms-with-a-vector-database-lab)  
[Access Denied for ATHENA | AWS re:Post](https://repost.aws/questions/QUJ1oSEboDR7mB0kQkI0IOWg/access-denied-for-athena)  
[iam create user access error on cloud quest | AWS re:Post](https://repost.aws/questions/QUH7L8qgvUTduFQ59WmX56EQ/iam-create-user-access-error-on-cloud-quest)

PJG999 · Answer

Quick follow-up: after contacting support to open a case, I've spotted the issue! Just in case anyone else is having trouble here, I noticed that when you log out from the lab and then enter the new URL to log in under a different account, it defaults to eu-north-1 - which is why the permissions error occurs. It can be fixed simply by changing the Region to us-east-1 and then the permissions are granted!

Cloud Quest Data Analytics "Securing the Data Lake" Issue

답변 추가

관련 콘텐츠