By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Glue crawler Account is denied access

0

I'm trying to create a Glue Crawler, but I'm encountering the following error:

"The following crawler failed to create: 'name'. Here is the most recent error message: Account XXXX is denied access."

I've attempted to create it in various regions, but I keep getting the same error.

These are the policies: Policy name

Attached entities AdministratorAccess AmazonEC2FullAccess AmazonS3FullAccess AWSGlueConsoleFullAccess AWSGlueServiceRole AWSLambda_FullAccess CloudWatchEventsFullAccess

And my user has the policy: AdministratorAccess

Error generated by CloudTrail:

"errorCode": "AccessDenied", "errorMessage": "Account xxxx is denied access."

Topics
AnalyticsSecurity, Identity, & Compliance
Tags
AWS GlueIAM Policies
Language
English
Bruno Cabral
asked 7 months ago299 views
4 Answers
0

Hi Bruno, is this account in a orgazination with a SCP attached?

AWS
Cristiano_Maciel
answered 7 months ago
0

Hi there! I got this: FullAWSAccess on AWS Organizations: Service control policies (SCPs)

Bruno Cabral
answered 7 months ago
0

I would check the role policies and permissions...

Check this doc for details: https://docs.aws.amazon.com/glue/latest/dg/security_iam_service-with-iam.html

AWS
Cristiano_Maciel
answered 7 months ago
0

Hello, I appreciate your help!

I did everything that was recommended on the forum and in videos I saw on YouTube, but nothing worked. I also reached out to friends who tried to help me in an online meeting, but without success.

I created a new AWS account, repeated the process from the first attempt, and it worked. So, I have no idea what was happening.

Bruno Cabral
answered 7 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content