Comprehend - Account is not authorized to make this call

Question

I am trying to make a AWS CLI command request to Comprehend but I am getting an error:

```
An error occurred (NotAuthorizedException) when calling the DetectPiiEntities operation: Your account is not authorized to make this call.
````

I am signed as the root user for my AWS account with full administrator access. Do I need to do something to enable my account for Comprehend?

Answer

Hello.

Judging from the content of the error, it appears that the use of Comprehend is restricted in your AWS account.  
There may be restrictions on the AWS side, so I think it would be a good idea to open a case with AWS Support under "Account and billing" and inquire.  
https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

Also, although it may not be very relevant, please make sure that you have selected a region where Comprehend can be used.  
https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/?nc1=h_ls

Answer

Hi,

In addition to Riku's guidance, I would also suggest you to check if you account is controlled by an AWS Organizations hierarchy: https://aws.amazon.com/organizations/

In that case, check if this structure doesn't have a policy in place barring your from using Comprehend for compliance reasons or any other similar purpose. See SCP documentation: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples.html

Best,

Didier

Comprehend - Account is not authorized to make this call

Relevant content