Permission denied 403 - Q Business webexperience

0

Just started a new AWS account.

Created a Q Business application.

Successfully attached a data source.

Created a user and gave it the following permissions:

AdministratorAccess AWS managed - job function Directly CHQB1Jul2024 Customer managed Directly QBpolicies1Jul2024

Yet all I get from the webexpereince is:

Amazon Q Powered by Amazon Web Services Permission needed. Please check your permissions. 403 Forbidden

Are there more permisssions I have to give the user or is it something else?

Charles
asked a month ago341 views
1 Answer
1

Hey Charles,

After you connect your application to the IAM Identity center their is an option to add groups and users from your from IAM identity center and connect them with your application. Can you double check you have configured the correct users.

Thanks, Ayman

AWS
aykazmi
answered a month ago
  • Hi Ayman

    Thanks for your reply, which seemed to progress.

    But after another full day on this point, I seem to have got nowhere.

    To recap,

    1. To get Q Business to work without messing up other things, I opened a new account.

    2. I created a Q Business application and connected a data source.

    3. The big problem is the constant

    Permission needed. Please check your permissions. 403 Forbidden when trying to access the Q Business webexperience URL.

    1. User created in IAM Identity Center, given full Admin and QBusiness permissions. Didn't work.

    2. Created custom policies and permisssions, added to the user and the app. Still didn't.

    3. At my wits end.

    I'm beginning to suspect it's not a permissions issue at all but something else.

    Any ideas appreciated.

    Charles