PERMISSION_DENIED

ActiveHTTP 403

The caller does not have permission to execute the operation. PERMISSION_DENIED must not be used for rejections caused by exhausting resources, and must not be used if the caller can't be identified (use UNAUTHENTICATED for that).

Description

PERMISSION_DENIED indicates the caller is authenticated but doesn't have authorization to perform the requested operation. The client identity is known but lacks the required permissions.

Common causes

•Insufficient IAM permissions
•Role doesn't include required action
•Resource policy denies access

HTTP equivalent

HTTP 403 – View status code reference →