How do I troubleshoot access errors when I use Lookout for Vision to create a dataset?

Resolution

If you get an AccessDeniedException error, then your custom role might not have the correct permissions. If you use a custom role, then make sure that the role has permissions similar to the following example:

{
  "Sid": "LookoutVisionConsoleS3BucketSearchAccess",
  "Effect": "Allow",
  "Action": [
    "s3:ListAllMyBuckets"
    ],
      "Resource": "*"
    },
    {
      "Sid": "LookoutVisionConsoleS3ObjectReadAccess",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:GetObjectVersion"
      ],
      "Resource": "arn:aws:s3:::lookoutvision-*/*"
    },
    {
      "Sid": "LookoutVisionConsoleDashboardAccess",
      "Effect": "Allow",
      "Action": [
        "cloudwatch:GetMetricData",
        "cloudwatch:GetMetricStatistics"
      ],
      "Resource": "*"
    }
  ]
}

Note: The bucket must be in the same AWS Account and AWS Region as your account.