Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

IAM Permissions Issue: Unable to find Amazon SP-API service for policy creation

0

Hello,

I am trying to set up permissions for a new IAM role and am running into an issue where I can't find the Amazon SP-API service.

Here's what I've done so far:

I created a new IAM role and a custom trust policy.

I am logged into my AWS account as the root user.

My problem is that when I try to attach a permissions policy, I cannot find either the "AmazonSPAPI" or "AmazonSellingPartnerAPI" service in the list of available services. It's simply not there.

Could someone please explain why these services are not visible, even though I'm working as the root user? What steps do I need to take to find and attach the correct permissions policy?

Any help would be greatly appreciated. Thank you.

Topics
Management & Governance
Tags
IAM PoliciesAWS Management ConsoleAWS Account Management
Language
English

asked a year ago247 views

2 Answers
0

The issue you're experiencing is related to how certain AWS services are represented in the IAM console. Some AWS services, including the Amazon Selling Partner API (SP-API), may not appear as standalone services in the IAM policy editor.

This doesn't mean you can't create policies for these services - it just means they might not be directly visible in the service selection dropdown. This is because not all AWS services have full support for IAM policy summaries and the visual editor.

To create a policy for Amazon SP-API, you have a few options:

  1. Use the JSON editor instead of the visual editor to manually create the policy with the appropriate actions and resources for SP-API.

  2. Look for the service under a different name or category. Some APIs are grouped under their parent services.

  3. Create a custom policy with specific actions needed for SP-API access. You'll need to know the exact action names (like "sellingpartnerapi:action").

If you're certain about the exact permissions needed, creating a custom JSON policy is often the most direct approach when dealing with services that aren't explicitly listed in the visual editor.

Remember that even as a root user, you're still limited by the services that are exposed in the IAM console interface. This isn't a permissions issue but rather relates to how certain services are represented in the IAM policy tools.
Sources
Troubleshoot IAM policies - AWS Identity and Access Management
AWS Identity and Access Management (IAM) - Manage Permissions

answered a year ago

0

Amazon SP-API isn't available by default in IAM permission policy list since it's not part of an AWS Service.

To use this api and set the correct permission policies, you need to follow the below steps:

  1. Integrating Selling Partner API: https://docs.aws.amazon.com/prescriptive-guidance/latest/strategy-gen-ai-selling-partner-api/integrating-sp-api.html
  2. Selling Partner API role configuration: https://developer-docs.amazon.com/sp-api/docs/roles-in-the-selling-partner-api
AWS

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content