Developers encountering an AccessDeniedException when trying to use Amazon Bedrock models may be facing issues with AWS Marketplace permissions rather than Bedrock-specific IAM policies. The error, which indicates insufficient access to a model, often arises because Bedrock automatically initiates an AWS Marketplace subscription in the background upon the first invocation of a model. This process requires specific Marketplace permissions like `aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, and `aws-marketplace:ViewSubscriptions`, which are not covered by a general `bedrock:*` wildcard. These permissions are typically only needed for the initial model enablement, and issues can also stem from an invalid payment method or geolocation restrictions on the AWS account. AI
IMPACT Helps developers resolve common access issues with cloud-based LLM services.
RANK_REASON Troubleshooting guide for a common developer error related to cloud service permissions.
- AccessDeniedException
- Amazon Bedrock
- AWS Lambda
- AWS Marketplace
- aws-marketplace:Subscribe
- aws-marketplace:Unsubscribe
- aws-marketplace:ViewSubscriptions
- bedrock:InvokeModel
- GovCloud
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
