Amazon Bedrock (Runtime API) error
Amazon Bedrock 403 AccessDeniedException: what it means and how to fix it
403 AccessDeniedExceptionRetry? NoLast verified 2 documented fixes3 sources
What it means
The request is denied because you do not have sufficient permissions to perform the requested action.
Causes
- IAM user or role lacks permission for the action (for example bedrock:InvokeModel)
- Expired temporary security credentials
How to fix it
- Fix 1.
Verify that your IAM user or role has the necessary permissions for the action you are attempting.
- Fix 2.
If you are using temporary security credentials, make sure they have not expired.
More Amazon Bedrock errors
All 22 Amazon Bedrock errorsHTTP 403 at other providers
Compare 403 across providers403 permission_errorRetry? Not statedAnthropic API403 Forbidden (network access denied)Retry? Not statedAzure OpenAI403 Forbidden (resource has been temporarily blocked)Retry? Not statedAzure OpenAI403 permission_deniedRetry? NoGemini API403 PERMISSION_DENIEDRetry? NoGemini API403 ForbiddenRetry? Not statedGroq API403 ForbiddenRetry? Not statedMistral API403 Country, region, or territory not supportedRetry? Not statedOpenAI API403 PermissionDeniedErrorRetry? Not statedOpenAI API403 permission_deniedRetry? Not statedOpenRouter403 Budget limit exceededRetry? NoOpenRouter403 content_policy_violationRetry? Not statedOpenRouter
FAQ
What does the Amazon Bedrock error "403 AccessDeniedException" mean?
The request is denied because you do not have sufficient permissions to perform the requested action.
How do I fix Amazon Bedrock "403 AccessDeniedException"?
There are 2 documented fixes. Start with the first: Verify that your IAM user or role has the necessary permissions for the action you are attempting.
Should I retry Amazon Bedrock "403 AccessDeniedException"?
No. The official docs treat this error as not retryable: fix the cause before sending the request again.
Which other AI APIs return HTTP 403?
Per their official error docs: Anthropic API (403 permission_error), Azure OpenAI (403 Forbidden (network access denied); 403 Forbidden (resource has been temporarily blocked)), Gemini API (403 permission_denied; 403 PERMISSION_DENIED), Groq API (403 Forbidden), Mistral API (403 Forbidden), OpenAI API (403 Country, region, or territory not supported; 403 PermissionDeniedError), OpenRouter (403 permission_denied; 403 Budget limit exceeded; 403 content_policy_violation; 403 refusal), Vertex AI (403 PERMISSION_DENIED), xAI API (403 Forbidden).
Sources
Last verified against 3 sources: Amazon Bedrock's official docs and official SDK repositories.
- docs.aws.amazon.comhttps://docs.aws.amazon.com/bedrock/latest/userguide/troubleshooting-api-error-codes.html
- docs.aws.amazon.comhttps://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html
- docs.aws.amazon.comhttps://docs.aws.amazon.com/sdkref/latest/guide/feature-retry-behavior.html
Newsletter
Know when the APIs change
One email per week. New model releases, API changes, what broke, and how developers are working around it.