Cannot get access to Bedrock models even after successfully subscribing to them in marketplace

Question

I'm trying to explore the Bedrock service a bit. I went to the Request Model Access page, selected all that don't require special permissions. I got the email claiming I've been successfully subcribed to all the models, and when I check my AWS Marketplace account I can see each of the model subscriptions (and each says they are active).

However, back in Bedrock, I still can't select any models in the Text playground. When I look at the request model access page again, each of the models changed the status back from 'In Progress'  to 'Available to request'. If I try again though, it gives me an 'Operation Not Allowed' error.

What am I missing?

Answer

I am experiencing the same issue.  I can confirm that I am in us-east-1. I have tried to add a model as an IAM user with bedrock full access policy and as the root account but I am still getting **operation not permitted** for any model I try to add.

I have also received email that I have successfully subscribed to the Marketplace for the models I requested access to.

Apart from creating a new AWS account, are there other things that can be done ?

Answer

Most likely the root cause is that you have SCPs at the organization level that prohibits marketplace access. Even if you have a full admin access to a given account in the Organization, a SCP can supersede this and limit permissions. See: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html for the general SCP documentation.

If its indeed an SCP that is the issue, the Organization owner/responsible needs to change the SCP to allow certain marketplace access. Please refer to: https://docs.aws.amazon.com/bedrock/latest/userguide/security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-subscription to see what needs to be allowed.

Please also make sure that  you enable the models: https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html#add-model-access (but believe this is what you are trying to do).

Answer

I'm also unable to add a model and seeing the same 'Operation not allowed' message while requesting access. This was with root user and also admin user. Did you find a solution? I've started reusing this account after maybe 2 years inactivity but have updated the billing. Worked with IAM settings. All made no difference. All leads welcome.

Answer

Hi - Thanks for checking. Can you please check if you are in the correct region?

Reference : https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html

Answer

Hi. The knowledge base and agents option is only visible for north virginia and oregon regions. I think they haven't rolled it out in the other regions. But, it is showing this error message in the North Virginia and Oregon region.

> This account does not currently have access to this model. Request access in Model access.

I can access the models in the Asia regions.
Why is this happening and how to solve it?
I am logged in as an IAM user with administrator access.

Cannot get access to Bedrock models even after successfully subscribing to them in marketplace

Relevant content