AWS IAM user policy

Question

I am trying to create IAM user with the access of Neptune graph database and user should be able to create graph Jupyter notebook.
I have provided Neptune full access .But IAM user still facing issue in creating graph notebook what else policy do I need to add.
![This is ss of error](/media/postImages/original/IMtpRiMEpqQMWUPNKtbL0OYg)

Accepted Answer

You need to dive deep into the error details, but it looks like it's not related to permissions. The error message says that it failed to create the notebook not that it's due to insufficient permissions. My recommendation is you to check cloudtrail and cloudwatch to dive deep into the problem. Also the error message is asking for internet access, make sure your VPC/Subnet has the correct routes, IGW and NAT Gateway if needed.

Hope this helps.

Answer

Since you've mentioned that you've given Neptune full access, here are a few additional AWS IAM policies you may need to ensure the IAM user has to function correctly:

* AmazonS3FullAccess: Neptune notebooks require access to S3 to store data.
* AmazonEC2FullAccess: This might be necessary since Neptune Notebooks create EC2 instances for the Jupyter environment.
* AWSGlueConsoleFullAccess: If the notebook involves any AWS Glue operations.

Additionally, you should ensure that the IAM user has access to create VPC endpoints if your Neptune cluster is placed within a VPC.

Answer

Also familiarize with these. https://docs.aws.amazon.com/neptune/latest/userguide/iam-data-access-policies.html

AWS IAM user policy

Relevant content