AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관

How do I fix all the "no identity-based policy allows the iam:ListAccountAliases action" errors

0

I have this "no identity-based policy allows the iam:ListAccountAliases action" error everywhere in the AWS interface. The error even appears in support requests or feedback. Everything just goes in circles.

Oh yes, the advice "Contact your administrator" is bad, that's me.

2개 답변
0

Hi,

I would suggest you to do what you're trying to do via CLI instead of console to have full control on what's happening.

Your first thing should be to run aws sts get-caller-identity to ensure that you really execute command under an userid that has admin privileges. See https://docs.aws.amazon.com/cli/latest/reference/sts/get-caller-identity.html

Then, when you're sure that you are admin, you should succeed with aws iam list-account-aliases. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iam/list-account-aliases.html for all details

Best,

Didier

profile pictureAWS
전문가
답변함 일 년 전
profile picture
전문가
검토됨 일 년 전
0

Hi,

As described in [1] 4, there's an issue with "Identity-based Policies". I would suggest you to open CloudShell from the top right of the management console and execute the following command

aws iam list-account-aliases

A similar error should occur, but at that time, the iam:listAccountAliases action is recorded in CloudTrail's event history [2](replace region). There is user information that was actually used for the action in "userIdentity", and specific error information are also described.

[1] https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html#policy-eval-denyallow [2] https://ap-northeast-1.console.aws.amazon.com/cloudtrailv2/home?region=<YOUR_REGION>#/events?eventname=ListAccountAlases

답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠