Title: Permission error while accessing SageMaker domain (ListDomains explicit deny)

Course Q&A Generative AI with Large Language Models
,
1

I am encountering a permission issue while trying to access SageMaker resources in the lab environment.

Error message:
User: arn:aws:sts::421338163762:assumed-role/voclabs/user4986152=Rahul_Khandelwal is not authorized to perform: sagemaker:ListDomains on resource: arn:aws:sagemaker:us-east-1:421338163762:domain/* with an explicit deny in an identity-based policy: arn:aws:iam::421338163762:policy/voc-cancel-cred

AWS error 2
AWS error 22558×1352 219 KB

Also, I am not able to launch AWS lab now in the first place. The red button is not turning green. I am getting this: account is still in cleanup

AWS error 1
AWS error 12558×1293 347 KB

From the error, it appears that the action sagemaker:ListDomains is being explicitly denied by the policy voc-cancel-cred. Because of this, I am unable to proceed with accessing or listing SageMaker domains.