All Content tagged with AWS Identity and Access Management
AWS Identity and Access Management (IAM) provides fine-grained access control across all of AWS. With IAM, you can specify who can access which services and resources, and under which conditions.
Content language: English
Filter content
Select tags to filter
Sort by
Sort by most recent
2369 results
I am investigating an AWS Systems Manager Run Command authorization failure on a Windows EC2 instance.
The SendCommand API call succeeds and returns a CommandId, but the subsequent command invocation...
2
answers
0
votes
33
views
asked 18 hours ago
I am using an AWS Free Tier account for an academic Data Engineering project.
I am trying to use AWS Glue Crawler. I have created the required IAM role and the IAM role validation is successful.
How...
1
answers
0
votes
39
views
asked 3 days ago
Sandip SamantaEXPERT
published 5 days ago0 votes42 views
Amazon SageMaker Unified Studio (SMUS) projects often fail when they move from exploration to production-adjacent machine learning (ML) pipelines. Larger instance types and non-interactive runs expose...
### SESv2 SendEmail returns AccessDeniedException although IAM Policy Simulator allows the request
This is a follow-up to an earlier resolved question about the default configuration set. An AWS re:P...
1
answers
0
votes
84
views
asked 8 days ago
Summary
Please add a native Export and Import capability for IAM Policies in the AWS console, scoped to accounts within the same AWS Organization. This would allow practitioners to replicate a policy...
1
answers
-1
votes
62
views
asked 8 days ago
We host an SSR app on Amplify Hosting (WEB_COMPUTE, us-east-1) using a custom deployment-spec v1 artifact rather than a framework adapter: .amplify-hosting/compute/default/server.js, with computeResou...
2
answers
0
votes
100
views
asked 9 days ago
I’m trying to clarify the IAM authorization behavior of direct Amazon SESv2 `SendEmail` when a verified identity has a default configuration set.
Consider this setup:
- A verified domain identity ha...
1
answers
0
votes
73
views
asked 10 days ago
I run an ops agent built on Strands. It reads on a read-only role and changes things only by opening a pull request against our GitOps repository. The problem: the agent's own credential can open that...
3
answers
0
votes
99
views
asked 13 days ago
We want one Amazon Bedrock AgentCore Runtime, a Strands agent with Knowledge Base search and per-user AgentCore Memory, shared by several tenants. Logged-in users call it from each tenant's web fronte...
1
answers
0
votes
101
views
asked 13 days ago
Hello AWS Support Team,
I am currently locked out of my root account following a mobile device upgrade where my authenticator seed was lost.
I opened Support Case 178977615700556 two days ago, but I...
1
answers
0
votes
87
views
asked 16 days ago
I am troubleshooting an AWS STS AssumeRole request that consistently fails with:
AccessDenied: not authorized to perform sts:SetSourceIdentity
The source is an IAM user using short-lived credentials...
1
answers
0
votes
93
views
asked 21 days ago
I'm hitting a persistent account-level Bedrock restriction that's affecting all model providers, not just one.
Error:
ValidationException: Access to Bedrock models is not allowed for this account
Co...
1
answers
0
votes
179
views
asked 22 days ago