By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

An error occurred (AccessDeniedException) when calling the ListPermissionSets operation

0

Hi, i have created IAM user and attached below policy. AdministratorAccess AWSOrganizationsFullAccess AWSSSOReadOnly also added one inline policy as well for these actions[ "sso:", "sso-directory:","identitystore:*"] but still i am getting below Error: An error occurred (AccessDeniedException) when calling the ListPermissionSets operation: User: arn:aws:iam::account-id:user/test_user is not authorized to perform: sso:ListPermissionSets

can any one please let us know where i should done wrong?

  • Oleksii Bebych EXPERT
    3 days ago

    please accept the answer if it was useful

Topics
Security, Identity, & Compliance
Tags
AWS IAM Identity Center
Language
English
sekhar
asked 12 days ago111 views
1 Answer
1

the needed action is "Action": "sso:ListPermissionSets"

you need to replace your "sso:", with "sso:*", or better avoid asterisks "*" and provide a specific action

profile picture
EXPERT
Oleksii Bebych
answered 12 days ago
profile picture
EXPERT
Osvaldo Marte
reviewed 8 days ago
  • sekhar
    10 days ago

    Thanks, but my questions is even if i provide enough permissions ,still i couldn't list the permission sets.

    client = boto3.client('sso-admin') response = client.list_permission_sets( InstanceArn='arn:aws:sso:::instance/ins-*****' ) print(response)

  • Osvaldo Marte EXPERT
    8 days ago

    Explicitly allow sso:ListPermissionSets. Adding a specific inline policy for sso:ListPermissionSets should resolve the issue.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content