pnizzle
pnizzle

Reputation: 6431

What AWS Role Policies do I need to be able to run AWS CLI commands

When ever I run a command to get DeviceFarm projects or Schedule a run I get errors stating that I do not have permissions to run the commands and that there is an explicit deny on my user.

I am in the role settings and cannot find any policy to add to enable me to run these commands.

What policy do I need to add?

The command: aws devicefarm schedule-run <options>

The error: User: arn:<user arn> is not authorized to perform: devicefarm:ScheduleRun on resource: <resource arn> with an explicit deny

Upvotes: 0

Views: 132

Answers (2)

John Rotenstein
John Rotenstein

Reputation: 270104

Normally, I would say that you could add the AWSDeviceFarmFullAccess policy on your IAM User, but the explicit deny suggests that something is intentionally prohibiting such access.

If you are using an AWS Account that is part of an AWS Organizations hierarchy, it is possible that a Service control policy is blocking use of the Device Farm service in the account.

Upvotes: 0

Charles
Charles

Reputation: 382

Precede your commands with sudo. That will enable you to run the commands with an elevated privilege and you should not encounter some of the challenges you are encountering.

Upvotes: 0

Related Questions