amazon q에 학습셋 데이터를 동기화 시킬려고 하는데 계속 Access denied when calling Amazon Q BatchPutDocument API. 이 오류가 나오네요.

0

사용하고 있는 역할 입니다 AmazonKendraFullAccess AmazonQFullAccess AmazonS3FullAccess AmazonS3OutpostsFullAccess AmazonS3ReadOnlyAccess CloudWatchLogsFullAccess 어떻게 해야 할까요?

hae
已提问 2 个月前55 查看次数
1 回答
0
已接受的回答

안녕하세요.

BatchPutDocument는 "AmazonQFullAccess"에 포함되어 있지 않습니다.
Amazon Q Business 정책이므로 다음과 같이 정책을 추가해 주시기 바랍니다.
https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonqbusiness.html

{
  "Version" : "2012-10-17",
  "Statement" : [
    {
      "Sid" : "test",
      "Effect" : "Allow",
      "Action" : [
        "qbusiness:BatchPutDocument"
      ],
      "Resource" : "*"
    }
  ]
}

다음 문서에 명시된 정책이 참고가 되리라 생각합니다.
https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/iam-roles.html#iam-roles-ds

{
    "Version": "2012-10-17",
    "Statement": [{
            "Sid": "AllowsAmazonQToIngestDocuments",
            "Effect": "Allow",
            "Action": [
                "qbusiness:BatchPutDocument",
                "qbusiness:BatchDeleteDocument"
            ],
            "Resource": "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}/index/{{index_id}}"
        },
        {
            "Sid": "AllowsAmazonQToIngestPrincipalMapping",
            "Effect": "Allow",
            "Action": [
                "qbusiness:PutGroup",
                "qbusiness:CreateUser",
                "qbusiness:DeleteGroup",
                "qbusiness:UpdateUser",
                "qbusiness:ListGroups"
            ],
            "Resource": [
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}",
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}/index/{{index_id}}",
                "arn:aws:qbusiness:{{region}}:{{account_id}}:application/{{application_id}}/index/{{index_id}}/data-source/*"
            ]
        }
    ]
}
profile picture
专家
已回答 2 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则