IAM Access denied Issue

0

Getting error in user groups, user and any action performed shows "Action denied, contact AWS administrator". Can you please help me on this. Please find one of the error message

You don't have permission to iam:ListUsers. To request access, copy the following text and send it to your AWS administrator. Learn more about troubleshooting access denied errors.

User: arn:aws:iam::{ID}:user/{USERIAMNAME} Service: iam Action: ListUsers On resource(s): arn:aws:iam::{ID}:user/ Context: no identity-based policy allows the iam:ListUsers action

<<update: Moderator note: updated the question to remove ID

mounika
질문됨 9달 전1138회 조회
2개 답변
2

<<First of all remove account id from your question at earliest>>

All you need to do is, log in with user/role, that has Admin/elevated privileges. Add iam:ListUsers action in one of the policy attached to your user/group policy. Once you would have added this permission and there are no denies at SCP/permission boundary level, you should be able to pass this error.

Or

You can add an policy to your user/group by following the below mentioned steps:

  1. Go to IAM Console
  2. Click on Users
  3. Click on your username(mounikaande)
  4. Add permissions
  5. Create inline policy
  6. Click on JSON at right side
  7. Add following json policy there: { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": "iam:ListUsers", "Resource": "*" } ] }

If this user belongs to a. group, then you need to do the same thing for the group not to specific user, if this group is ok to have this permission.

Once you add this policy, to your user or to the group, which this user belongs to, you should pass this error.

Hope this helps.

Comment here if you have additional questions, happy to help.

Abhishek

profile pictureAWS
전문가
답변함 9달 전
profile picture
전문가
검토됨 9달 전
  • Do you have any additional questions, happy to help?

0

I can't add or see my username in users section and below is the screenshot. Can you please suggest where to add permissions. Enter image description here

mounika
답변함 9달 전
  • Like I mentioned in my answer, you would need to login with user with elevated privileges first or ask some who has permissions to do so. It's evident that you can't list users so you would't be able to do this. You'll need to ask someone who can grant you these permissions.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠