SSO创建权限集在 CLI 中未授权,但在控制台中有效

0

【以下的问题经过翻译处理】 我正在使用相同帐户中的相同SSO角色创建SSO权限集。它在控制台中运行,但从CLI中无法运行。我正在使用AdministrationAccess托管策略。通过IAM策略模拟器进行了检查,应该可以工作。

这是CLI: ''' `aws sso-admin create-permission-set --name test --instance-arn 'arn:aws:sso:::instance/ssoins-1234567c07aa927c'

An error occurred (AccessDeniedException) when calling the CreatePermissionSet operation: User: arn:aws:sts::123456789012:assumed-role/AWSReservedSSO_AdministratorAccess_d856d636dbae8a64/admin_XXX is not authorized to perform: sso:CreatePermissionSet` '''

1 Answer
0

【以下的回答经过翻译处理】 已解决问题,SSO ARN不正确,未使用正确组织的ARN。

profile picture
EXPERT
answered 5 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions