How to add correct permissions to create image collection?

Question

I setup a user in sagemaker.  
Added role permissions.  
Executed python code snippet to create collection.  
  
An error occurred (AccessDeniedException) when calling the CreateCollection operation: User: arn:aws:sts::767317008127:assumed-role/AmazonSageMaker-ExecutionRole-20200713T124931/SageMaker is not authorized to perform: rekognition:CreateCollection on resource: arn:aws:rekognition:us-east-1:767317008127:collection/test  
  
ive tried  
To add role policy to user  
Recreate user in sagemaker  
Im able to create s3 bucket through portal under user id  
  
need some help getting unstuck.

Answer

Hi jklacy@,  
  
Thank you for your interest in Rekognition. In your role policy that you added to your user, did it contain the "rekognition:CreateCollection" action? (See \[1] and \[2] for an in depth view) This action (or a broader action "rekognition:*") will be necessary in order for your user to be able to create a Rekognition collection.  
  
\[1] https://docs.aws.amazon.com/rekognition/latest/dg/security_iam_service-with-iam.html  
\[2] https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonrekognition.html

How to add correct permissions to create image collection?

관련 콘텐츠