Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

AWS Glue CreateCrawler returns "Account is denied access" despite AdministratorAccess

0

I am unable to create an AWS Glue crawler.

Region: ap-south-1 (Mumbai)

Error: Account <account-id> is denied access.

The error occurs from both:

  1. AWS CLI
  2. AWS Management Console

I have verified:

  • IAM user has AdministratorAccess
  • IAM simulation: glue:CreateCrawler = allowed
  • IAM simulation: glue:CreateClassifier = allowed
  • iam:PassRole = allowed
  • Organizations SCP = FullAWSAccess
  • No permissions boundary
  • No inline user policies
  • No explicit IAM Deny found
  • Glue database creation works
  • Glue table creation works
  • Glue service role has AWSGlueServiceRole
  • Lake Formation uses IAM_ALLOWED_PRINCIPALS
  • S3 permissions have been verified
  • Glue Data Catalog is working

Interestingly: CreateDatabase -> succeeds CreateTable -> succeeds CreateCrawler -> Account is denied access CreateClassifier -> Account is denied access

CloudTrail shows: errorCode: AccessDenied errorMessage: Account <account-id> is denied access.

Has anyone encountered this specific account-level Glue restriction? Could this be an account verification, service activation, or AWS-side restriction?

  • kamlesh638
    14 days ago

    Hi i'm facing the same issue, just checking if your issue got resolved. Mine is not i've submitted the support case days ago but it still hasn't received any support.

Topics
AnalyticsManagement & Governance
Tags
AWS GlueIAM PoliciesAWS Account Management
Language
English

asked 24 days ago68 views

1 Answer
0

Hello.

I found a post in the thread at the URL below from someone experiencing the same issue as you.
Based on the comments in the replies, it appears the problem can be resolved by contacting AWS Support.
Although it wasn't with Glue, I also once encountered an "Account is denied access" error with a different AWS service and resolved it by contacting AWS Support.
https://repost.aws/ja/questions/QUgyk3a9ALT_qRXjQVHnb7tw/account-is-denied-access-to-create-glue-crawler

Inquiries under "Account and billing" can be made free of charge.
https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

EXPERT

answered 24 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content