How to generate policy based on CloudTrail events and resolve errors

Question

While generating a policy in IAM for a specific role using feature "Generate policy based on CloudTrail events", I get error "Policy generation failed. CloudTrail log files processed per policy generation limit exceeded. Please fix before trying again."

And if generated for few days, policy does not include DynamoDB and SQS policies used by the role

Answer 1

Please have a look at the Access Analyzer quotas

Based on the error message you hit the quota of 100,000 AWS CloudTrail log files processed per policy generation.

You can reduce the period of the policy or reduce the number of regions selected.