Identifying Objects in Video Streams Using SageMaker - CFN template: S3 access denied

0

Hi, I have a problem with access to cfn templates. Error appears in every region. How can i solve that?

  • Hello, To confirm, you are attempting to execute one of the stacks provided in the linked document from the Create Application section? If so, I too am running into that same issue from my console. I will check with the team to see if these are indeed publicly accessible templates. Please confirm.

  • Yes, in that section. Thank you for respond :) If you check, please let me know.

5 Answers
0

Have you updated the S3 bucket policy to allow the Amazon SageMaker service access to the bucket? Does the Amazon SageMaker service role have a policy which allows it access to your S3 bucket?

AWS
answered 2 years ago
0

I'm logged in as a root user. Shouldn't I have AdministratorAccess? I refer to public template: https://docs.aws.amazon.com/kinesisvideostreams/latest/dg/examples-sagemaker.html Also, templates from other sources are available.

aszti97
answered 2 years ago
0

Also, when i'm trying to get bucket policy in CLI i get the same error. Is it possible, that this bucket isn't public?

aszti97
answered 2 years ago
0

Even while logged in as root (which I would also recommend that you not do), it is not like having administrator or sudo access in Windows/Linux. Many services and their resources, such as S3, have their own resource policies which may also require configuration to allow access to content stored in said resources (such as a bucket in this case).

On the bucket you need to allow the SageMaker service (assuming that's what's needing access) to S3 via a bucket policy (xhttps://docs.aws.amazon.com/AmazonS3/latest/userguide/access-policy-language-overview.html).

Just to confirm, Are you as trying to run the Cloudformation templates in S3 (as a root user) from the Cloudformation console or are you trying to have SageMaker use templates in the S3 bucket?

AWS
answered 2 years ago
0

My goal is to upload CFN template via templateURL=https://s3.eu-central-1.amazonaws.com/kvsit-eu-central-1/cfn-template.template.yml in CloudFormation console. And two errors occur. First one is: "You must specify a Stack ID. Displaying your Stacks page". And the second one: "S3 error: Access Denied". I've created s3 bucket role and added few permissions, related to Sagemaker and Kinesis. But it's still not working. I tried also to give full access, but it didn't help either. I doubt it's the problem with policies, because other templates are loading fine.

aszti97
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions