342 questions
0
votes
0
answers
27
views
in gcp mysql, can't get the authentication_iam plugin to load [migrated]
I'm running mysql via gcp's cloud platform and I'm trying to get service account iam passwordless access working. Today's blocker is the authentication_iam plugin.
The docs (and AIs) tell me to set ...
- 3,803
0
votes
0
answers
11
views
Implementing ErrorHandler for IG Route
I am working with ForgeRock Identity Gateway (IG) and trying to implement a common error handling mechanism across my routes using a custom CommonErrorHandler.I want all errors/exceptions occurring in ...
- 3
-1
votes
1
answer
77
views
I tried to make an aws IAM user to see S3 buckets with certain tags
Here is the IAM policy (Mostly by chatgpt) :
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowListAllBucketsForConsole&...
- 11
0
votes
1
answer
57
views
Restricting IAM user from accessing/downloading my .py files in AWS sagemaker
I want to share my jupyter notebook to public in AWS sagemaker. But when an IAM user logins all the files are listed under file explorer and he is allowed to download myfunctions.py files where all ...
- 10
0
votes
0
answers
37
views
How would I configure my AWS console to view customer resources?
I am building a GPU observability platform that integrates multi-cloud. I am hoping to build a workflow that works as follows for AWS:
User authenticates with SSO to sign into my platform.
User ...
- 35
0
votes
1
answer
46
views
DP for AWS multi account role provision from central org
I have multiple AWS accounts linked to a single org account.
I would like to provision:
'IAM Admin' roles in each, with a policy which allows IAM:* such that it can create and provision policy for ...
- 389
0
votes
1
answer
111
views
Vertex AI Gemini 1.5 Pro returns 404 Not Found from Cloud Function despite correct IAM, region, and enabled API
I am encountering a persistent 404 Not Found error when attempting to call the gemini-1.5-pro-preview-0409 model from the Vertex AI API within a service in my Google Cloud project. This issue persists ...
0
votes
0
answers
40
views
Google VPC Service control issue
I have bigquery projects PrA and PrB. There are five dataviews created in PrA- D1,D2,D3,D4, D5. Data in D1 to D3 is coming from PrA table and data in D4 and D5 is coming from PrA table join PrB table.
...
- 1
-1
votes
1
answer
438
views
Keycloak synchronization with Entra ID
I have keycloak and I want to integrate with Entra ID with OIDC.
So I have created the claims in the Enterprise Application for groups.
Then in keycloak I have created three clients for API. Then I ...
- 11
1
vote
1
answer
46
views
JWT and roles per team
I have an authorization scheme for a user. This particular user is member of multiple teams.
In the team MANAGEMENT the user has the role EMPLOYEE
In the team LOCATION_1 the user has the role MANAGER
...
0
votes
0
answers
48
views
Why are some AWS VPC Route Table actions disabled
I'm seeing different behavior in the AWS Management Console between users who sign in via AWS SSO (IAM Identity Center)
In the VPC console under Route Tables, some action items in the "Actions&...
- 1
0
votes
0
answers
60
views
Need help understanding s3 object access
I have a policy and attached to a user test-user
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "S3ConsoleAccess",
...
- 1
0
votes
0
answers
110
views
Re-establishing a broken long-lived connection with iam tokens
my company has historically used Lettuce without authentication. We relied on AWS security groups. But now our security team is asking us to authenticate via iam.
Each of our application services that ...
- 13
4
votes
3
answers
1k
views
ImagePullFailure for Azure Container App/Registry. IAM failing, admin user required?
I've set up a container registry that contains an image. I have a container app that uses the image and I have it working, but only when "Admin user" is checked in the registry's access keys....
- 2,871
0
votes
0
answers
442
views
"Google Cloud IAM: Unable to find 'Cloud Vision API User' role or 'vision.images.annotate' permission, even with 'Service Account Admin' role"
"I am trying to grant the 'Cloud Vision API User' role (or the vision.images.annotate permission for a custom role) to a service account in my Google Cloud project ('DriveOCRAutomation'). However,...
