使用AWS re:Post即您表示您同意 AWS re:Post 使用条款
AWS re:Postre:Post

Glue crawler Account is denied access

0

I'm trying to create a Glue Crawler, but I'm encountering the following error:

"The following crawler failed to create: 'name'. Here is the most recent error message: Account XXXX is denied access."

I've attempted to create it in various regions, but I keep getting the same error.

These are the policies: Policy name

Attached entities AdministratorAccess AmazonEC2FullAccess AmazonS3FullAccess AWSGlueConsoleFullAccess AWSGlueServiceRole AWSLambda_FullAccess CloudWatchEventsFullAccess

And my user has the policy: AdministratorAccess

Error generated by CloudTrail:

"errorCode": "AccessDenied", "errorMessage": "Account xxxx is denied access."

主题
分析安全、身份和合规性
标签
AWS GlueIAM 策略
语言
English
Bruno Cabral
已提问 1 年前507 查看次数
4 回答
0

Hi Bruno, is this account in a orgazination with a SCP attached?

AWS
Cristiano_Maciel
已回答 1 年前
0

Hi there! I got this: FullAWSAccess on AWS Organizations: Service control policies (SCPs)

Bruno Cabral
已回答 1 年前
0

I would check the role policies and permissions...

Check this doc for details: https://docs.aws.amazon.com/glue/latest/dg/security_iam_service-with-iam.html

AWS
Cristiano_Maciel
已回答 1 年前
0

Hello, I appreciate your help!

I did everything that was recommended on the forum and in videos I saw on YouTube, but nothing worked. I also reached out to friends who tried to help me in an online meeting, but without success.

I created a new AWS account, repeated the process from the first attempt, and it worked. So, I have no idea what was happening.

Bruno Cabral
已回答 1 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈，并能促进提问者的职业发展。

回答问题的准则

相关内容