Amazon web services 当我的用户具有所需权限时面临AccessDeniedException

Amazon web services 当我的用户具有所需权限时面临AccessDeniedException,amazon-web-services,amazon-iam,aws-cli,Amazon Web Services,Amazon Iam,Aws Cli,我正在尝试从CLI对DynamoDb表执行批导入。执行该命令时,出现以下错误: An error occurred (AccessDeniedException) when calling the BatchWriteItem operation: User: arn:aws:iam::********:user/Mehran is not authorized to perform: dynamodb:BatchWriteItem on resource: arn:aws:dynamodb:u

我正在尝试从CLI对DynamoDb表执行批导入。执行该命令时,出现以下错误:

An error occurred (AccessDeniedException) when calling the BatchWriteItem operation: User: arn:aws:iam::********:user/Mehran is not authorized to perform: dynamodb:BatchWriteItem on resource: arn:aws:dynamodb:us-east-1:********:table/History with an explicit deny
这是因为我明确地向我的用户添加了AmazonDynamoDBFullAccess权限。当我为我的用户进入“访问顾问”选项卡时,我可以看到所提到的已授予的权限


有人能告诉我我遗漏了什么吗?

即使用户策略有AmazondynamodFullAccess,有效的用户策略也明确拒绝资源arn:aws:dynamodb:us-east-1:***********:table/History。一种解决方案是为用户删除显式拒绝策略,但存在显式策略是有原因的。显式拒绝覆盖允许

见: