Questions tagged with IAM Policies

You manage access in AWS by creating policies and attaching them to IAM identities (users, groups of users, or roles) or AWS resources.

Content language: English

Select tags to filter
Sort by most recent

Browse through the questions and answers listed below or filter and sort to narrow down your results.

1555 results
`ClientError: An error occurred (AccessDeniedException) when calling the CreateInferenceComponent operation: User: arn:aws:sts::x:assumed-role/xx-xx-xx-xx-user-service-role/SageMaker is not authorize...
1
answers
0
votes
20
views
asked 2 days ago
I am working on the IAM Identity Center to provide access for a user to a single EC2 instance. I have manages to setup the policies in IAM and setup the permission sets and assigned to users/accounts....
4
answers
0
votes
39
views
asked 4 days ago
We have an org with a sub account created through the console. I have AzureAD SAML SSO configured and that has been working properly (AFAIK) to the main account. I want to have other users switch ro...
1
answers
0
votes
44
views
asked 5 days ago
I have tried a lot in the past two days to get documentDB working with IAM on node driver version 6.14.2. However I keep getting authentcation failed. the documentation is pretty poor for this. I cann...
1
answers
0
votes
33
views
asked 5 days ago
I'm getting an error: Agent: Error: An error occurred (accessDeniedException) when calling the InvokeAgent operation: Access denied when calling Bedrock. Check your request permissions and retry the r...
2
answers
0
votes
38
views
asked 5 days ago
Hi team, I created an S3 bucket using CDK and initially added an explicit deny to the bucket policy with the following code: ```javascript quarantineFilesBucket.addToResourcePolicy( new iam.Policy...
1
answers
0
votes
38
views
asked 9 days ago
When I try to create a query log config, I'm getting a cryptic error about missing permissions to the log destination. My user has permissions to create log groups. ` aws --profile [redacted] route53...
1
answers
0
votes
31
views
asked 9 days ago
Hello, I has an error below when calling batch inference: ***An error occurred (ValidationException) when calling the CreateModelInvocationJob operation: The provided ARN is invalid for the service re...
1
answers
0
votes
35
views
asked 10 days ago
I have a container I'm trying to run on ECS. I'm getting this error message: ``` 2025-03-05T14:50:51.765Z *************************** 2025-03-05T14:50:51.765Z APPLICATION FAILED TO START 2025-03-0...
2
answers
0
votes
38
views
asked 11 days ago
**Issue** After the May 2024 announcement about Amazon QuickSight supporting GetClusterCredentialsWithIAM for Redshift data sources (https://aws.amazon.com/about-aws/whats-new/2024/05/amazon-quicksigh...
1
answers
0
votes
37
views
asked 12 days ago
I am building a folder management software where folders and files are stored in AWS S3. User authentication is managed through AWS Cognito, with application users stored in a Cognito User Pool. I nee...
1
answers
0
votes
22
views
asked 12 days ago
Hi, i want to apply for accessing Bedrock Claude models but i get the error: • Claude 3.5 Sonnet - User: arn:aws:sts::<id2>:assumed-role/AWSReservedSSO_AWSAdministratorAccess_<id/email> is not autho...
1
answers
1
votes
41
views
asked 13 days ago