amazon-web-servicesaws-cliaws-device-farmaws-policiesaws-roles

What AWS Role Policies do I need to be able to run AWS CLI commands


When ever I run a command to get DeviceFarm projects or Schedule a run I get errors stating that I do not have permissions to run the commands and that there is an explicit deny on my user.

I am in the role settings and cannot find any policy to add to enable me to run these commands.

What policy do I need to add?

The command: aws devicefarm schedule-run <options>

The error: User: arn:<user arn> is not authorized to perform: devicefarm:ScheduleRun on resource: <resource arn> with an explicit deny


Solution

  • Normally, I would say that you could add the AWSDeviceFarmFullAccess policy on your IAM User, but the explicit deny suggests that something is intentionally prohibiting such access.

    If you are using an AWS Account that is part of an AWS Organizations hierarchy, it is possible that a Service control policy is blocking use of the Device Farm service in the account.