By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Client Error Exception (Access denied for AWS Comprehend)

0

Getting the following exception while trying to access the AWS Comprehend using aws_access_key_id, aws_secret_access_key, aws_session_token. "ClientError: An error occurred (AccessDeniedException) when calling the BatchDetectDominantLanguage operation: User: arn:aws:sts::********:assumed-role/AWSReservedSSO_AWSAdministratorAccess_************/*******@.com is not authorized to perform: comprehend:BatchDetectDominantLanguage with an explicit deny in a service control policy"

Topics
Security, Identity, & ComplianceManagement & GovernanceMachine Learning & AI
Tags
AWS Identity and Access ManagementAWS Command Line InterfaceAmazon ComprehendIAM PoliciesService Control Policy
Language
English
rePost-User-8843855
asked a year ago255 views
1 Answer
0

You should confirm with your AWS Organizations administrator. Probably the administrator is the one who created your AWS account. The operation (comprehend:BatchDetectDominantLanguage) is denied by Service Control Policy (SCP) of AWS Organizations. SCP is able to deny operations independently of IAM policies.

imiky
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content