Troubleshooting Resource Explorer setup and configuration issues
Use the information here to help you diagnose and fix issues that can occur when you initially set up or configure Amazon Resource Explorer.
Topics
I get an "access denied" message when I make a request to Resource Explorer
-
Verify that you have permissions to call the action and resource that you requested. An administrator can grant permissions by assigning an Amazon Identity and Access Management (IAM) permission policy to your IAM principal, such as a role, group, or user.
To provide access, add permissions to your users, groups, or roles:
-
Users managed in IAM through an identity provider:
Create a role for identity federation. Follow the instructions in Creating a role for a third-party identity provider (federation) in the IAM User Guide.
-
IAM users:
-
Create a role that your user can assume. Follow the instructions in Creating a role for an IAM user in the IAM User Guide.
-
(Not recommended) Attach a policy directly to a user or add a user to a user group. Follow the instructions in Adding permissions to a user (console) in the IAM User Guide.
-
The policy must allow the requested
Actionon theResourcethat you want to access.If the policy statements that grant those permissions include any conditions, such as time-of-day or IP address restrictions, you also must meet those requirements when you send the request. For information about viewing or modifying policies for an IAM principal, see Managing IAM policies in the IAM User Guide.
-
-
If you're signing API requests manually (without using the Amazon SDKs
), verify that you signed the request correctly.
I get an "access denied" message when I make a request with temporary security credentials
-
Verify that the IAM principal that you're using to make the request has the correct permissions. Permissions for temporary security credentials are derived from a principal defined in IAM, so the permissions are limited to those granted to the principal. For more information about how permissions for temporary security credentials are determined, see Controlling permissions for temporary security credentials in the IAM User Guide.
-
Verify that your requests are being signed correctly and that the request is well formed. For details, see the toolkit
documentation for your chosen SDK or Using temporary credentials with Amazon resources in the IAM User Guide. -
Verify that your temporary security credentials haven't expired. For more information, see Requesting temporary security credentials in the IAM User Guide.