Access denied by aws

Hi,

It looks like user sagarika doesn't have enough permissions to list groups and perform some actions on IAM. To fix that, log in as a user with enough privileges, go to the IAM console and configure sagarika properly (according to what sagarika needs, making sure sagarika has the correct permissions, including ListGroups). You can use root for that. It is not a best practice to use root for daily operations, so try to avoid using root for daily operation, but you can use root to recover other users' access or perform specific tasks. In the link below, you'll see the second point is "Restore IAM user permissions." Tasks that require root user credentials: https://docs.aws.amazon.com/accounts/latest/reference/root-user-tasks.html

In other words... using root or other user with enough privileges, you have to make sure sagarika has an IAM policy that covers all actions sagarika has to perform, including ListGroups. I'd recommend to review all tasks that sagarika should do, not only ListGroups. I also recommend to use an AWS Managed Policy (those already created, pre-built) instead of creating a new one. In the link below you'll see there are some for IAM (IAMAccessAdvisorReadOnly, IAMAccessAnalyzerFullAccess, IAMAccessAnalyzerReadOnlyAccess, IAMFullAccess, IAMReadOnlyAccess, IAMSelfManageServiceSpecificCredentials, IAMUserChangePassword, IAMUserSSHKeys.) Take a look at them and select the best one for sagarika. AWS managed policies: https://docs.aws.amazon.com/aws-managed-policy/latest/reference/policy-list.html.

Have a great day!!!

Hi, please, the first step is to get sagarika access back. For that, follow the instructions provided in the previous post. Use root or a user with admin privileges and change the policies assigned to sagarika