The enterprise organization administrator configured an SCP policy for this account. The request does not meet the policy's allowed conditions, resulting in denial.

Example

Assume the SCP policy associated with account A is configured as follows:

{​
  "Statement": [​
    {​
      "Effect": "Deny",​
      "Action": ["tos:PutBucketPolicy"],​
      "Resource": [​
        "trn:tos:::*"​
      ]​
    }​
  ]​
}​

This policy prohibits account A and its sub-users from performing bucket policy configuration on any bucket. If any user attempts this operation, this error occurs.

Solution

Contact the enterprise organization administrator to review the SCP policy configuration.

Last updated: 2025.10.11 17:59:31

Public security network record in Beijing: No. 11010802032137