Common issues and solutions
Try signing out completely and signing back in. This refreshes your session and permissions.
Protein structure search requires the AWS managed policy
AmazonBioDiscoveryInAppFullAccess on your Amazon Bio Discovery application role. An IT
administrator with iam:AttachRolePolicy permission must complete this update.
Send these instructions to the team that manages AWS permissions for your organization. Attaching the policy is additive, does not remove existing permissions, and restores access without changing your data.
Choose one of the following options. Both options attach the same policy. Complete either the AWS Management Console steps or the AWS CLI steps; you do not need to complete both.
Alternatively, open the
IAM console,
choose Roles, and search for your role. Unless you customized it during application
creation, the role name starts with AmazonBioDiscoveryAccessRole.
AmazonBioDiscoveryInAppFullAccess, select the check box next to the policy, and then
choose Add permissions.
AmazonBioDiscoveryInAppFullAccess now appears in the list of attached policies for
the role.
If you manage IAM with the AWS CLI, run the following commands from a session with IAM administrative credentials for your account.
The credentials you use must allow iam:ListRoles and iam:AttachRolePolicy. If your
account uses AWS Organizations service control policies or permissions boundaries that restrict IAM actions,
contact your AWS administrator to perform this step.
aws iam list-roles \
--query "Roles[?starts_with(RoleName, 'AmazonBioDiscoveryAccessRole')].RoleName"
If you renamed the role when you created the application, this command does not return it. Use the Amazon Bio Discovery Console to find the role name instead.
YOUR_ROLE_NAME with the role name from the previous
step:
aws iam attach-role-policy \
--role-name YOUR_ROLE_NAME \
--policy-arn arn:aws:iam::aws:policy/AmazonBioDiscoveryInAppFullAccess
aws iam list-attached-role-policies \
--role-name YOUR_ROLE_NAME \
--query "AttachedPolicies[?PolicyName=='AmazonBioDiscoveryInAppFullAccess']"
After attaching the policy, sign out of your Amazon Bio Discovery application portal and sign back in (or refresh the page) to pick up the updated permissions, then retry the action. IAM permission changes typically take less than 1 minute to propagate. If the action still fails after you attach the policy, wait 1–2 minutes and try again.
When contacting support, please include: