AMG: Your account is not allowed to perform the requested action. Please reach out to AWS support.

Question

I'm attempting to create a Grafana Workspace but show me the following error:

> Your account is not allowed to perform the requested action. Please reach out to AWS support.

I created a ticket 10 days ago with AWS support, but it's still "unassigned." From what I've read, it's a simple fix; they'll correct the error in your account. If anyone from support can help me, the case ID is "***************".

*Edit: Removed case ID \- Randi S.

Riku_Kobayashi · Accepted Answer

Hello.

As indicated in the error message below, it is highly likely that there are some restrictions on your AWS account.  
Therefore, I don't think reviewing your IAM policy will solve the problem.  
> Your account is not allowed to perform the requested action. Please reach out to AWS support.

I've seen similar questions on AWS re:Post before, and I think there's nothing you can do other than wait for a reply from AWS support.  
AWS support can be busy, so it might take several days to get a response. Perhaps you should be patient and wait?  
https://repost.aws/ja/questions/QUoOGBYzSTQYKPkeKxsGlGgw/failed-to-start-the-instance-i-xxxx-this-account-is-currently-blocked-and-not-recognized-as-a-valid-account-please-contact-aws-verification-amazon-com-if-you-have-questions

re:Post Agent · Answer

The error you're encountering indicates that your IAM user or role lacks the necessary permissions to create an Amazon Managed Grafana workspace. This is an authorization issue that needs to be resolved by updating your IAM policies.

To resolve this, you'll need to ensure your IAM policies grant the required permissions for creating Grafana workspaces. Here's what needs to happen:

1. Navigate to the IAM console and locate the user, role, or group associated with your account
2. Review the attached policies in the "Permissions" tab
3. Add or update a policy statement to grant the necessary Amazon Managed Grafana permissions (such as `grafana:CreateWorkspace`)
4. Save the policy changes

If you don't have permissions to modify IAM policies yourself, you'll need to contact your AWS administrator - the person who provided your sign-in credentials. They can update your permissions to allow you to create Grafana workspaces.

If your account is part of an AWS Organization, there may also be Service Control Policies (SCPs) at the organization level that are restricting your actions, which would need to be addressed by your organization's administrator.

While waiting for your support case to be assigned, I'd recommend checking with your internal AWS administrator first, as this is typically something that can be resolved through proper IAM policy configuration rather than requiring AWS Support intervention.  
**Sources**  
[Troubleshooting Amazon Managed Grafana identity and access - Amazon Managed Grafana](https://docs.aws.amazon.com/grafana/latest/userguide/security_iam_troubleshoot.html)  
[How do I troubleshoot when User: arn is no authorized to perform Create * or Delete * or Update * on resource(s) because no identity- policy allows the actions | AWS re:Post](https://repost.aws/articles/ARKj9INM-NSmasOMsjm4BWUA/how-do-i-troubleshoot-when-user-arn-is-no-authorized-to-perform-create-or-delete-or-update-on-resource-s-because-no-identity-policy-allows-the-actions)  
[UpdateWorkspaceConfiguration - Amazon Managed Grafana](https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdateWorkspaceConfiguration.html)

AMG: Your account is not allowed to perform the requested action. Please reach out to AWS support.

Add your answer

Relevant content