Account is denied access to create Glue crawler
I am using an IAM role AWSGlueServiceRole created in AWS Glue and tried to create the crwaler to run on S3 source. The error I get is
The following crawler failed to create: "abc" Here is the most recent error message: Account XXX is denied access.
Also tried with another role that I created with below policies. But still get the same error.
AmazonS3FullAccess AWSGlueServiceRole AdministratorAccess AWSGlueConsoleFullAccess AWSGlueSchemaRegistryFullAccess AWSGlueDataBrewServiceRole
- 新しい順
- 投票が多い順
- コメントが多い順
Same issue here
Have you found the solution?
I arose a support ticket and they did their magic. Now I'm able to create crawlers
Are you using AWS Organizations and a member account under the Organization? Check if your Organization restricts Glue crawler creation. AWS Organization can overwrite any AdministratorAccess using Service control policies (SCPs). Its possible that some SCPs deny you access. SCPs affect all users and roles in attached accounts, including the root user. **Reference: **https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
Hello,
It does not seems like Glue related issue. This seems like some account level problem. I believe if you try to access other service you will face the same issue. I would suggest reach out to AWS Support to check if anything is blocked from account level.
I've followed all the advice given here, but still getting the same error. How did you solve the issue @rePost-User-1592616?
関連するコンテンツ
- 質問済み 9ヶ月前
Hi,
I also faced this issue, reason as below