Assumed Role Not Allowed to Perform Actions

[twilbur1997]

Thank you for designing such a great site for ease of use for these AI services! I use the site often to show inputs/outputs needed for API calls to people who aren't familiar with the services. However, the site has run into errors starting some point in the last few weeks.

Several services are unable to be used due to credentials not allowing actions.

Unaffected services: Textract

Affected Services (error output): Rekognition, Translate, Comprehend Medical

Affected Services (no output): Transcribe, Polly, Comprehend

===

When submitting a picture to Amazon Rekognition at https://ai-service-demos.go-aws.com/rekognition:

User: arn:aws:sts::430695380796:assumed-role/Cognito_BootcampUnauth_IPUnauth_Role/CognitoIdentityCredentials is not authorized to perform: rekognition:DetectLabels because no identity-based policy allows the rekognition:DetectLabels action

===

Similar output recorded for Amazon Translate at https://ai-service-demos.go-aws.com/translate:

User: arn:aws:sts::430695380796:assumed-role/Cognito_BootcampUnauth_IPUnauth_Role/CognitoIdentityCredentials is not authorized to perform: translate:TranslateText because no identity-based policy allows the translate:TranslateText action No translation occurred - check the error!

===

Output for Comprehend Medical:

User: arn:aws:sts::430695380796:assumed-role/Cognito_BootcampUnauth_IPUnauth_Role/CognitoIdentityCredentials is not authorized to perform: comprehendmedical:DetectEntities because no identity-based policy allows the comprehendmedical:DetectEntities action

User: arn:aws:sts::430695380796:assumed-role/Cognito_BootcampUnauth_IPUnauth_Role/CognitoIdentityCredentials is not authorized to perform: comprehendmedical:DetectPHI because no identity-based policy allows the comprehendmedical:DetectPHI action

===

Other services, with less/no error output:

• Transcribe opens another tab when attempting to download the transcription, without downloading the file
• Polly says the recording is ready, but the audio file is 0:00 long
• Comprehend has blank boxes as output, no error messages