How to add correct permissions to create image collection?

Question

I setup a user in sagemaker.  
Added role permissions.  
Executed python code snippet to create collection.  
  
An error occurred (AccessDeniedException) when calling the CreateCollection operation: User: arn:aws:sts::767317008127:assumed-role/AmazonSageMaker-ExecutionRole-20200713T124931/SageMaker is not authorized to perform: rekognition:CreateCollection on resource: arn:aws:rekognition:us-east-1:767317008127:collection/test  
  
ive tried  
To add role policy to user  
Recreate user in sagemaker  
Im able to create s3 bucket through portal under user id  
  
need some help getting unstuck.

seanfAWS · Answer

Hi jklacy@,  
  
Thank you for your interest in Rekognition. In your role policy that you added to your user, did it contain the "rekognition:CreateCollection" action? (See \[1] and \[2] for an in depth view) This action (or a broader action "rekognition:*") will be necessary in order for your user to be able to create a Rekognition collection.  
  
\[1] https://docs.aws.amazon.com/rekognition/latest/dg/security_iam_service-with-iam.html  
\[2] https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonrekognition.html

How to add correct permissions to create image collection?

Add your answer

Relevant content