Skip to content

Instantly share code, notes, and snippets.

@cbodley
Created February 22, 2024 14:25
Show Gist options
  • Save cbodley/96372128ea08e4c6c1f5479f887fc5a0 to your computer and use it in GitHub Desktop.
Save cbodley/96372128ea08e4c6c1f5479f887fc5a0 to your computer and use it in GitHub Desktop.
iam:get_role access denied
2024-02-22T09:12:02.204-0500 7f9f78c006c0 20 req 5008242608135058575 0.000000000s iam:get_role inline role policy: { Version: 2012-10-17, Statements: [ { Effect: Allow, Action: [ iam:GetRole ], Resource: [ arn:*:*:*::* ] } ], }
2024-02-22T09:12:02.204-0500 7f9f78c006c0 2 req 5008242608135058575 0.000000000s iam:get_role normalizing buckets and tenants
2024-02-22T09:12:02.204-0500 7f9f78c006c0 2 req 5008242608135058575 0.000000000s iam:get_role init permissions
2024-02-22T09:12:02.204-0500 7f9f78c006c0 2 req 5008242608135058575 0.000000000s iam:get_role recalculating target
2024-02-22T09:12:02.205-0500 7f9f78c006c0 2 req 5008242608135058575 0.001000034s iam:get_role reading permissions
2024-02-22T09:12:02.205-0500 7f9f78c006c0 2 req 5008242608135058575 0.001000034s iam:get_role init op
2024-02-22T09:12:02.205-0500 7f9f78c006c0 10 req 5008242608135058575 0.001000034s iam:get_role cache get: name=default.rgw.meta+roles+RGW11111111111111111role_names.s3-tests-myrole : hit (requested=0x1, cached=0x7)
2024-02-22T09:12:02.205-0500 7f9f78c006c0 20 req 5008242608135058575 0.001000034s iam:get_role INFO: oid in read_info is: 6bb72062-c290-4650-a855-20f448f69cef2024-02-22T09:12:02.205-0500 7f9f78c006c0 10 req 5008242608135058575 0.001000034s iam:get_role cache get: name=default.rgw.meta+roles+roles.6bb72062-c290-4650-a855-20f448f69cef : hit (requested=0x17, cached=0x17)
2024-02-22T09:12:02.205-0500 7f9f78c006c0 2 req 5008242608135058575 0.001000034s iam:get_role verifying op mask
2024-02-22T09:12:02.205-0500 7f9f78c006c0 20 req 5008242608135058575 0.001000034s iam:get_role required_mask= 0 user.op_mask=7
2024-02-22T09:12:02.205-0500 7f9f78c006c0 2 req 5008242608135058575 0.001000034s iam:get_role verifying op permissions
2024-02-22T09:12:02.205-0500 7f9f78c006c0 20 policy resource arn:*:*:*::* != arn:aws:iam::RGW11111111111111111:role/s3-tests/s3-tests-MyRole
2024-02-22T09:12:02.205-0500 7f9f78c006c0 10 req 5008242608135058575 0.001000034s iam:get_role evaluate_iam_policies: implicit deny from identity-based policy
2024-02-22T09:12:02.205-0500 7f9f78c006c0 20 req 5008242608135058575 0.001000034s iam:get_role no policies for a policy mandatory op 87
2024-02-22T09:12:02.205-0500 7f9f78c006c0 1 req 5008242608135058575 0.001000034s op->ERRORHANDLER: err_no=-1 new_err_no=-1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment