cloudsploit
cloudsploit copied to clipboard
User is not authorized for multiple plugins
After attaching read only policies to the user, getting following error for multiple plugins
"Unable to list Access Analyzers: User: arn:aws:iam::9XXXXXXXXX840:user/new_user is not authorized"
Here is SS for dynamoDB:
@AmeerTheInteger you should add list policies to the user also.
@AmeerTheInteger you should add list policies to the user also.
Already done that.
Hi @AmeerTheInteger , Can you share the list of policies you have attached to the new_user?
Hi @AmeerTheInteger , Can you share the list of policies you have attached to the new_user?
hi @AmeerTheInteger , so the policy that have the required permissions is SecurityAudit. Can you try using this policy? Please refer to the following doc - https://github.com/aquasecurity/cloudsploit/blob/master/docs/aws.md
hi @AmeerTheInteger , so the policy that have the required permissions is SecurityAudit. Can you try using this policy? Please refer to the following doc - https://github.com/aquasecurity/cloudsploit/blob/master/docs/aws.md
The issue is with Dynamo DB. I have attached its policy but still getting the same error
hi @AmeerTheInteger No i believe that issue is not with dynamo db its with attached policies. The policy that you have attached did not have the required permissions. Can you try out updating the permissions?