Amazon Datazone unable to add project member to project which is inside domain unit.

Question

In Amazon Datazone, I am not able to add the members to project, my project is inside a Domain unit, and my IAM user is the OWNER of this project, and even my IAM user is there in the Project Membership Policy for the domain unit. My user has also the permission of adding the members "datazone:CreateProjectMembership", what is that I am missing here?

Ankur · Answer

This is tough to answer without examining the specific policies. However, here are the recommended debugging steps:

1. Check IAM Permissions:
Make sure your IAM user has all required permissions:
- datazone:CreateProjectMembership
- datazone:ListProjects
- datazone:UpdateProject
- datazone:GetProject
- datazone:ListProjectMembers
- datazone:GetProjectMembershipPolicy

2. Domain Unit Membership Policy:
Verify the policy configuration:
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": ["arn:aws:iam::account-id:user/your-username"]
            },
            "Action": [
                "datazone:CreateProjectMembership",
                "datazone:ManageProject"
            ],
            "Resource": "*"
        }
    ]
}

3. Check Role Requirements:
- Ensure you have the OWNER role in the project
- Verify Domain Unit admin permissions

Amazon Datazone unable to add project member to project which is inside domain unit.

Add your answer

Relevant content