Comment
Author: Admin | 2025-04-28
VPC endpoint policy allows the codecommit:ListRepositories action Access denied due to a VPC endpoint policy – explicit denial Check for an explicit Deny statement for the action in your Virtual Private Cloud (VPC) endpoint policies. For the following example, the action is codedeploy:ListDeployments. Update your VPC endpoint policy by removing the Deny statement. For more information, see Update a VPC endpoint policy in the AWS PrivateLink Guide. User: arn:aws:iam::123456789012:user/JohnDoe is not authorized to perform: codedeploy:ListDeployments on resource: arn:aws:codedeploy:us-east-1:123456789012:deploymentgroup:* with an explicit deny in a VPC endpoint policy Access denied due to a permissions boundary – implicit denial Check for a missing Allow statement for the action in your permissions boundary. For the following example, the action is codedeploy:ListDeployments. Update your permissions boundary by adding the Allow statement to your IAM policy. For more information, see Permissions boundaries for IAM entities and Edit IAM policies. User: arn:aws:iam::123456789012:user/JohnDoe is not authorized to perform: codedeploy:ListDeployments on resource: arn:aws:codedeploy:us-east-1:123456789012:deploymentgroup:* because no permissions boundary allows the codedeploy:ListDeployments action Access denied due to a permissions boundary – explicit denial Check for an explicit Deny statement for the action in your permissions boundary. For the following example, the action is sagemaker:ListModels. Update your permissions boundary by removing the Deny statement from your IAM policy. For more information, see Permissions boundaries for IAM entities and Edit IAM policies. User: arn:aws:iam::777788889999:user/JohnDoe is not authorized to perform: sagemaker:ListModels with an explicit deny in a permissions boundary Access denied due to session policies – implicit denial Check for a missing Allow statement for the action in your session policies. For the following example, the action is codecommit:ListRepositories. Update your session policy by adding the Allow statement. For more information, see Session policies and Edit IAM policies. User: arn:aws:iam::123456789012:user/JohnDoe is not authorized to perform: codecommit:ListRepositories because no session policy allows the codecommit:ListRepositories action Access denied due to session policies – explicit denial Check for an explicit Deny statement for the action in your session policies. For the following example, the action is codedeploy:ListDeployments. Update your session policy by removing the Deny statement. For more information, see Session policies and Edit IAM policies.
Add Comment