Questions tagged [aws-permissions]
30 questions
0
votes
1 answer
Access denied when getting transcription
My setup is the following:
React-native app client -> AWS API Gateway -> AWS Lambda function -> AWS S3 -> AWS Transcribe -> AWS S3
I am successfully able to upload an audio file to an S3 bucket from the lambda, start the transcription and even…
Kronax
- 69
- 7
0
votes
1 answer
AWS permission for role: AccessDeniedException
I have an AWS Role with ReadOnlyAccess (AWS Managed Policy).
I need to make this role capable of executing some actions, for example start/stop an Amazon EC2 instance and connect via ssm in eu-west-1 and eu-central-1 regions, but even full…
Nika Khliobas
- 3
- 1
0
votes
1 answer
How to authorize users to access GSI
How do I authorizer all users to access a GSI? (In my case, the userIndex)
I can access the primary-index just fine. I successfully authorized all users to access the primary-index the following way:
Here I target the primary-index, which works…
Sebastian Nielsen
- 3,835
- 5
- 27
- 43
0
votes
1 answer
What kind of permission do I need if I'm part of an IAM group to create an EMR cluster on AWS?
I tried to create an EMR cluster as my user is part of an IAM group on AWS, but I cannot, it says
"You do not have permissions to create roles". "Unable to create cluster"
justasking
- 33
- 3
0
votes
1 answer
AWS S3 getBucketLogging fails when called from lambda function
I am trying in an AWS lambda to get the bucket logging settings for my buckets. For this I enumerate the buckets with S3.listBuckets() - which works just fine. I then iterate over the bucket names like this (Typescript):
const bucketNames = await…
P.J.Meisch
- 18,013
- 6
- 50
- 66
0
votes
1 answer
S3 Bucket upload restriction based on file name and extension
Please check this JSON code and let me know what is wrong?
All files gets denied.
I need code where certain types of files can be uploaded by the users in the console.
{
"Version": "2012-10-17",
"Id": "Policy1657799010112",
"Statement": [
{
…
Landerson
- 37
- 9
0
votes
1 answer
AWS S3 Permissions: Locking down view to a domain
I'm attempting to lock down viewing of S3 resources - really just images - to my web application's domain. For instance, if someone goes to my site - let's say example.com - and there's a src reference to the image, I want it to be viewable. But…
Jeremy L.
- 853
- 8
- 15
0
votes
1 answer
how to get list of Destination Log Groups to show up in AWS
I am trying to create my first flow log monitoring in cloudwatch.. but noticing that the log group I've made is not showing up at all
notice :
But when I am attempting to use this group ______ in the creation of the flow log.. the dropdown is empty…
Erik
- 2,782
- 3
- 34
- 64
0
votes
1 answer
The same query working on Athena and not working on Lambda - S3 permissions
I'm trying to query a partitioned table that is based on S3 bucket from Lambda
and get the following error:
But, when I used the same query via Athena it works well.
My Lambda role includes S3 full permission for all the resources.
BTW I received…
idan
- 1,508
- 5
- 29
- 60
0
votes
1 answer
How to set permissions to view/restore AWS S3 object version history
I can't seem to figure out what permissions I must add to my policy to allow an IAM user access to view/download previous versions of an object.
Currently, my policy contains the following permissions. Once logged on the AWS console website, the…
KingOtto
- 840
- 5
- 18
0
votes
1 answer
"An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied" when using batch jobs
I have a compute environment with 'ecsInstanceRole'. It contains the policies 'AmazonS3FullAccess' and 'AmazonEC2ContainerServiceforEC2Role'
Since I am using the AmazonS3FullAccess policy, I assume the batch job has permission to list, copy, put…
Pooja Hegde
- 31
- 1
- 8
0
votes
2 answers
How to enable billing permission for IAM in AWS?
I have already assign billing permission and full administrator permission to IAM role but still I IAM user getting permission issue. How I can solve this problem?
Birendra Rawat
- 1,307
- 1
- 8
- 8
0
votes
1 answer
Which permission is required to see Fargate container logs
We are using AWS ECS Fargate to host our application. I have this "Reader" IAM user who can't change anything but only can see stuff.
I've managed to configure the permissions for this Reader user so the user can see the service cluster, the…
e-mre
- 3,305
- 3
- 30
- 46
-1
votes
1 answer
Access to EC2 server for external developers
New to AWS. I have read this post about external access but that was for sftp. I need to grant external developers access to our server so they can write some code that will download data from a third party site. Everything I am reading is about…
GoGoPuffs
- 43
- 6