- 最新
- 投票最多
- 评论最多
Hello.
As indicated in the error message below, it is highly likely that there are some restrictions on your AWS account.
Therefore, I don't think reviewing your IAM policy will solve the problem.
Your account is not allowed to perform the requested action. Please reach out to AWS support.
I've seen similar questions on AWS re:Post before, and I think there's nothing you can do other than wait for a reply from AWS support.
AWS support can be busy, so it might take several days to get a response. Perhaps you should be patient and wait?
https://repost.aws/ja/questions/QUoOGBYzSTQYKPkeKxsGlGgw/failed-to-start-the-instance-i-xxxx-this-account-is-currently-blocked-and-not-recognized-as-a-valid-account-please-contact-aws-verification-amazon-com-if-you-have-questions
The error you're encountering indicates that your IAM user or role lacks the necessary permissions to create an Amazon Managed Grafana workspace. This is an authorization issue that needs to be resolved by updating your IAM policies.
To resolve this, you'll need to ensure your IAM policies grant the required permissions for creating Grafana workspaces. Here's what needs to happen:
- Navigate to the IAM console and locate the user, role, or group associated with your account
- Review the attached policies in the "Permissions" tab
- Add or update a policy statement to grant the necessary Amazon Managed Grafana permissions (such as
grafana:CreateWorkspace) - Save the policy changes
If you don't have permissions to modify IAM policies yourself, you'll need to contact your AWS administrator - the person who provided your sign-in credentials. They can update your permissions to allow you to create Grafana workspaces.
If your account is part of an AWS Organization, there may also be Service Control Policies (SCPs) at the organization level that are restricting your actions, which would need to be addressed by your organization's administrator.
While waiting for your support case to be assigned, I'd recommend checking with your internal AWS administrator first, as this is typically something that can be resolved through proper IAM policy configuration rather than requiring AWS Support intervention.
Sources
Troubleshooting Amazon Managed Grafana identity and access - Amazon Managed Grafana
How do I troubleshoot when User: arn is no authorized to perform Create * or Delete * or Update * on resource(s) because no identity- policy allows the actions | AWS re:Post
UpdateWorkspaceConfiguration - Amazon Managed Grafana
The account is part of an organization, but it has the "FullAWSAccess" policy. I'm trying to create the Workspace directly from the root account using AdministratorAccess. So I don't think it's a permissions issue that I can resolve.
Have you paid your AWS bill?