Faceliveness Back-End Access Denied

@Riku, I tried both the permission but still get the same error. Here is my IAM

I'm not sure if that two policy are having a conflict or maybe missing something.

Hello.
Would it be possible for you to share the error message and the IAM policy and code you are using?

Hmm..., the role is attached correctly, at this point I can't think of anything missing. Btw, thank you for you help.

Thank you for the response @Riku, please see below the error message return by the lambda function that I'm calling to get the liveness session.

{"errorMessage": "An error occurred (AccessDeniedException) when calling the CreateFaceLivenessSession operation: ", "errorType": "AccessDeniedException", "requestId": "7aad255e-ba03-4d42-acee-ecefaf85da36", "stackTrace": ["  File \"/var/task/lambda_function.py\", line 18, in lambda_handler\n    'sessionId': create_session()\n", "  File \"/var/task/lambda_function.py\", line 6, in create_session\n    response = client.create_face_liveness_session()\n", "  File \"/var/task/botocore/client.py\", line 535, in _api_call\n    return self._make_api_call(operation_name, kwargs)\n", "  File \"/var/task/botocore/client.py\", line 980, in _make_api_call\n    raise error_class(parsed_response, operation_name)\n"]}

Also, here are the following IAM policy that the lambda is using.

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "VisualEditor0",
			"Effect": "Allow",
			"Action": [
				"rekognition:CreateFaceLivenessSession",
				"rekognition:GetFaceLivenessSessionResults"
			],
			"Resource": "*"
		}
	]
}

The code that I'm using came from the docs, Calling the Face liveness API's https://docs.aws.amazon.com/rekognition/latest/dg/face-liveness-calling-apis.html

import boto3

client = boto3.client('rekognition')

def create_session():
    response = client.create_face_liveness_session()
    session_id = response.get("SessionId")

    return session_id

def lambda_handler(event, context):
    return {
        'statusCode': 200,
        'sessionId': create_session()
    }

Can't figure out why it throws Access Denied exception even if I set the IAM policy the way the documents shows.

Same problem. Did anyone solve this ??? I did everything same way on the aws official document said.

I'm also having an AccessDeniedException when using CreateFaceLivenessSessionCommand with Javascript v3. My iAM role already have all actions and resources of rekognition, i can use the ListFacesCommand, IndexFacesCommand and SearchFacesByImageCommand because my role have all of the rekognition but when calling the CreateFaceLivenessSessionCommand it shows AccessDeniedException. what seems the problem?