- Newest
- Most votes
- Most comments
The issue was not related to permissions, the error message "AccessDeniedException" is misleading. I tried to access an in-existent vault, which resulted in the same error message.
The problem was based on the following wrong account-id format, which I copied directly from the AWS Console. It needs to be provided without the dashes:
aws glacier initiate-job --vault-name <NAME> --account-id 1234-1234-1234 --job-parameters '{"Type": "inventory-retrieval"}'
Hello ,
Thank you for posting your question on the AWS Repost, my name is Rochak and it will be a pleasure assisting you with this today.
I understand you are trying to delete multiple unlocked vaults and you were able to delete most of them but you are not able to delete few and you are getting error while trying to delete them even as a user who created the vault and also as a root user. Please, let me know if my understanding is incorrect.
Please note that there are some instances where root user or admin user do get access denied and there a number of reasons that you might receive an access denied error on your root user. This includes:
• A service control policy (SCP) is restricting your access to a service • A resource-based policy is restricting your access to a resource • A permissions boundary is in limiting the actions your entity can perform • A session policy is in place and is causing an authorization issue • A VPC endpoint policy is restricting access to your IAM entities
Please follow the troubleshooting steps provided here [1] depending on your use case and the error that you receive.
I am also adding [2] for your references which provides detailed steps as well as video tutorial on troubleshooting access denied or unauthorized operation errors with an IAM policy.
I hope this helps. If you need further info, let me know in the comments; otherwise I'd appreciate if you mark my answer as "accepted".
Kind regards, Rochak from AWS
References:
[1] Troubleshoot access denied issues for a root user or an admin user https://aws.amazon.com/premiumsupport/knowledge-center/iam-access-denied-root-user/
[2] Troubleshoot access denied or unauthorized operation errors with an IAM policy https://aws.amazon.com/premiumsupport/knowledge-center/troubleshoot-iam-policy-issues/#
Relevant content
- asked 2 years ago
- asked 10 months ago
