Unauthorised API call has been made

Question

```
Unauthorised API call has been made :Region - us-east-1, Service - cloudtrail,Action - LookupEvents, API Params - {'LookupAttributes': [{'AttributeKey': 'EventName', 'AttributeValue': 'RotateKey'}], 'MaxResults': 1}
```
I am getting this error using boto3 even though I have full admin privileges on the credentials being used

Didier_Durand · Answer

Hi, to make sure that the CLI uses the credentials with the full admin right, you should first validate them.

The precedence rules (see https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html) may result in different credentials that those that you believe you use.

So, try to run 'aws sts get-caller-identity' to check the identity under which CLI runs. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/sts/get-caller-identity.html

Then, check your aws cli config via 'aws configure list'. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/configure/list.html

You should then be sure which identity you're using and confirm that it is the one with full admin rights

Unauthorised API call has been made

相关内容