使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

Glue crawler Account is denied access

0

I'm trying to create a Glue Crawler, but I'm encountering the following error:

"The following crawler failed to create: 'name'. Here is the most recent error message: Account XXXX is denied access."

I've attempted to create it in various regions, but I keep getting the same error.

These are the policies: Policy name

Attached entities AdministratorAccess AmazonEC2FullAccess AmazonS3FullAccess AWSGlueConsoleFullAccess AWSGlueServiceRole AWSLambda_FullAccess CloudWatchEventsFullAccess

And my user has the policy: AdministratorAccess

Error generated by CloudTrail:

"errorCode": "AccessDenied", "errorMessage": "Account xxxx is denied access."

主題
分析安全性、身分識別與合規
標籤
AWS GlueIAM 政策
語言
English
Bruno Cabral
已提問 1 年前檢視次數 505 次
4 個答案
0

Hi Bruno, is this account in a orgazination with a SCP attached?

AWS
Cristiano_Maciel
已回答 1 年前
0

Hi there! I got this: FullAWSAccess on AWS Organizations: Service control policies (SCPs)

Bruno Cabral
已回答 1 年前
0

I would check the role policies and permissions...

Check this doc for details: https://docs.aws.amazon.com/glue/latest/dg/security_iam_service-with-iam.html

AWS
Cristiano_Maciel
已回答 1 年前
0

Hello, I appreciate your help!

I did everything that was recommended on the forum and in videos I saw on YouTube, but nothing worked. I also reached out to friends who tried to help me in an online meeting, but without success.

I created a new AWS account, repeated the process from the first attempt, and it worked. So, I have no idea what was happening.

Bruno Cabral
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容