","request_id":"req_22fxnxndwyaove7zvyzjg4bn7wugjazxduu2ezokbzomdr3i6qnq","error...

2026年07月21日 08:35 35.12 秒 success

错误信息

bad response status code 403, message: User: arn:aws:iam::592965057012:user/user-g2l9wsww is not authorized to perform: bedrock-mantle:CreateInference on resource: arn:aws:bedrock-mantle:us-east-1:592965057012:project/default because no permissions boundary allows the bedrock-mantle:CreateInference action, body: {"type":"error","request_id":"req_22fxnxndwyaove7zvyzjg4bn7wugjazxduu2ezokbzomdr3i6qnq","error":{"type":"permission_error","message":"User: arn:aws:iam::592965057012:user/user-g2l9wsww is not authorized to perform: bedrock-mantle:CreateInference on resource: arn:aws:bedrock-mantle:us-east-1:592965057012:project/default because no permissions boundary allows the bedrock-mantle:CreateInference action"}}

AI 解决方案

🔍 错误分析

1. 🌐 错误翻译

原文：bad response status code 403, message: User: arn:aws:iam::592965057012:user/user-g2l9wsww is not authorized to perform: bedrock-mantle:CreateInference on resource: arn:aws:bedrock-mantle:us-east-1:592965057012:project/default because no permissions boundary allows the bedrock-mantle:CreateInference action, body: {"type":"error","request_id":"req_22fxnxndwyaove7zvyzjg4bn7wugjazxduu2ezokbzomdr3i6qnq","error":{"type":"permission_error","message":"User: arn:aws:iam::592965057012:user/user-g2l9wsww is not authorized to perform: bedrock-mantle:CreateInference on resource: arn:aws:bedrock-mantle:us-east-1:592965057012:project/default because no permissions boundary allows the bedrock-mantle:CreateInference action"}}
译文：响应状态码403错误，消息：用户arn:aws:iam::592965057012:user/user-g2l9wsww未被授权在资源arn:aws:bedrock-mantle:us-east-1:592965057012:project/default上执行bedrock-mantle:CreateInference操作，因为没有权限边界允许bedrock-mantle:CreateInference操作，响应体：{"type":"error","request_id":"req_22fxnxndwyaove7zvyzjg4bn7wugjazxduu2ezokbzomdr3i6qnq","error":{"type":"permission_error","message":"用户arn:aws:iam::592965057012:user/user-g2l9wsww未被授权在资源arn:aws:bedrock-mantle:us-east-1:592965057012:project/default上执行bedrock-mantle:CreateInference操作，因为没有权限边界允许bedrock-mantle:CreateInference操作"}}

2. 🎯 原因分析

这是一个 AWS IAM权限不足 导致的403访问拒绝错误。根本原因是：

IAM用户权限缺失：指定的IAM用户（user-g2l9wsww）没有bedrock-mantle:CreateInference操作的权限

权限边界限制：用户当前的权限策略或权限边界未包含对Bedrock Mantle服务的创建推理操作授权

资源级权限缺失：没有对特定资源（project/default）授予相应操作的权限

3. 💡 解决方案

需要通过AWS IAM控制台或AWS CLI为用户添加相应的权限策略。以下是修复步骤：

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "bedrock-mantle:CreateInference",
      "Resource": "arn:aws:bedrock-mantle:us-east-1:592965057012:project/default"
    }
  ]
}

执行步骤：

登录AWS管理控制台，进入IAM服务

找到用户 user-g2l9wsww，点击进入

选择"权限"标签页，点击"添加权限"

选择"直接附加现有策略"

搜索并选择上述自定义策略，或创建新的内联策略

如果使用AWS CLI，执行以下命令：

   aws iam put-user-policy --user-name user-g2l9wsww --policy-name BedrockMantleCreateInferencePolicy --policy-document file://policy.json

4. 🛡️ 预防措施

🔐 最小权限原则：为IAM用户配置权限时，严格遵循最小权限原则，只授予必需的操作和资源权限，避免过度授权

📊 使用AWS Policy Generator工具：利用AWS提供的Policy Generator工具（在IAM控制台中可用），可视化地生成准确的权限策略，减少配置错误

🧪 使用IAM Access Analyzer：定期使用IAM Access Analyzer检查未使用的权限和潜在的访问风险，及时清理冗余权限

分析新问题查看更多