AWS DeviceFarm ScheduleRun always returns AccessDeniedException in cli

Asked Oct 24 '22 at 12:36

Active Oct 24 '22 at 12:36

Viewed 61 times

When I try to start a DeviceFarm run via CLI or API with an IAM user, I'm always getting the following error:

An error occurred (AccessDeniedException) when calling the ScheduleRun operation: User: <user-arn> is not authorized to perform: devicefarm:ScheduleRun on resource: <upload-arn>

It happens regardless of user permissions, even on a user who has the AdministratorAccess policy attached. Policy json:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
        }
    ]
}

The command I'm trying to run:

aws devicefarm schedule-run --region=us-west-2 --project-arn=<project-arn> --test='type=APPIUM_PYTHON,testPackageArn=<package-arn>,testSpecArn=<spec-arn>'

However I can still start the run manually via the web AWS console.

asked Oct 24 '22 at 12:36

Andrey Bobkov

Have you attached the policy to the user you are trying to run the command as? – Christoph Fischer Oct 24 '22 at 13:17
Yes, the policy I mentioned in the question is attached to the user I'm using. Also, I've tried attaching AWSDeviceFarmFullAccess policy, as well as giving the specific permission `"devicefarm:ScheduleRun"` using a custom policy. Result is always the same. – Andrey Bobkov Oct 24 '22 at 13:21
What happens when you run `aws sts get-caller-identity´ ? – Christoph Fischer Oct 25 '22 at 07:02
@ChristophFischer it returns me my current user with userid, account, and arn – Andrey Bobkov Oct 25 '22 at 07:54

AWS DeviceFarm ScheduleRun always returns AccessDeniedException in cli

0 Answers0