Unauthorised API call has been made

Question

```
Unauthorised API call has been made :Region - us-east-1, Service - cloudtrail,Action - LookupEvents, API Params - {'LookupAttributes': [{'AttributeKey': 'EventName', 'AttributeValue': 'RotateKey'}], 'MaxResults': 1}
```
I am getting this error using boto3 even though I have full admin privileges on the credentials being used

Answer

Hi, to make sure that the CLI uses the credentials with the full admin right, you should first validate them.

The precedence rules (see https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html) may result in different credentials that those that you believe you use.

So, try to run 'aws sts get-caller-identity' to check the identity under which CLI runs. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/sts/get-caller-identity.html

Then, check your aws cli config via 'aws configure list'. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/configure/list.html

You should then be sure which identity you're using and confirm that it is the one with full admin rights

Unauthorised API call has been made

Relevant content