The following error message is returned when authentication fails:
{"error":{"code":403,"message":"Permission 'artifactregistry.mavenartifacts.list' denied on resource '//artifactregistry.googleapis.com/projects/cloud-aoss/locations/us/repositories/cloud-aoss-java' (or it may not exist).","status":"PERMISSION_DENIED","details":[{"@type":"type.googleapis.com/google.rpc.ErrorInfo","reason":"IAM_PERMISSION_DENIED","domain":"artifactregistry.googleapis.com","metadata":{"permission":"artifactregistry.mavenartifacts.list","resource":"projects/cloud-aoss/locations/us/repositories/cloud-aoss-java"}}]}}
One of the following reasons can cause this error:
You haven't enabled the service account or AWS account ID: Enable the
service account or AWS account ID by providing its details in thecustomer
enablement form.
You haven't set up Application Default Credentials (ADC): To resolve this
issue, make sure that you haveset up authentication.
You have set up ADC with incorrect service account: Make sure that the
service account you are using is the same service account that you have
enabled using the customer enablement form.
You might encounter the following error while trying to generate a service
account key for authentication:
Service account key creation is disabled.
The organization policy constraint 'iam.disableServiceAccountKeyCreation' is
enforced. This constraint disables the creation of new service account keys.
To resolve this issue, contact your organization policy administrator and
request an exception to the organization policy constraint that disables the
creation of service account keys.
Can't download packages
If you're experiencing issues downloading packages, complete the following:
Check whether the package exists in the repository. For instructions, seeValidate your
connection.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis page provides guidance on resolving authentication issues encountered with Assured Open Source Software.\u003c/p\u003e\n"],["\u003cp\u003eAn HTTP 403 error, indicating a denied permission, can occur if the service or AWS account isn't enabled, if Application Default Credentials (ADC) are not set up, or if the wrong service account is used.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP 403 error regarding \u003ccode\u003eartifactregistry.pythonpackages.list\u003c/code\u003e has the same resolution steps as the \u003ccode\u003eartifactregistry.mavenartifacts.list\u003c/code\u003e error.\u003c/p\u003e\n"],["\u003cp\u003eIf service account key creation is disabled by organization policy, contact the policy administrator to request an exception.\u003c/p\u003e\n"]]],[],null,["# Troubleshoot Assured OSS issues\n\nThis page shows you how to resolve issues with Assured Open Source Software.\n\nAuthentication errors\n---------------------\n\nThis section lists some errors that you might encounter with authentication and\nprovides suggestions about fixing them.\n\n### HTTP 403: Permission `artifactregistry.mavenartifacts.list` denied\n\nThe following error message is returned when authentication fails: \n\n {\n \"error\": {\n \"code\": 403,\n \"message\": \"Permission 'artifactregistry.mavenartifacts.list' denied on resource '//artifactregistry.googleapis.com/projects/cloud-aoss/locations/us/repositories/cloud-aoss-java' (or it may not exist).\",\n \"status\": \"PERMISSION_DENIED\",\n \"details\": [\n {\n \"@type\": \"type.googleapis.com/google.rpc.ErrorInfo\",\n \"reason\": \"IAM_PERMISSION_DENIED\",\n \"domain\": \"artifactregistry.googleapis.com\",\n \"metadata\": {\n \"permission\": \"artifactregistry.mavenartifacts.list\",\n \"resource\": \"projects/cloud-aoss/locations/us/repositories/cloud-aoss-java\"\n }\n }\n ]\n }\n }\n\nOne of the following reasons can cause this error:\n\n- **You haven't enabled the service account or AWS account ID** : Enable the\n service account or AWS account ID by providing its details in the [customer\n enablement form](https://developers.google.com/assured-oss#get-started).\n\n- **You haven't set up Application Default Credentials (ADC)** : To resolve this\n issue, make sure that you have\n [set up authentication](/assured-open-source-software/docs/validate-connection#set_up_authentication).\n\n For more details, see [Set up Application Default Credentials](/docs/authentication/provide-credentials-adc).\n- **You have set up ADC with incorrect service account**: Make sure that the\n service account you are using is the same service account that you have\n enabled using the customer enablement form.\n\n### HTTP 403: Permission `artifactregistry.pythonpackages.list` denied\n\nThe resolution for this error is the same as that for the [HTTP 403 error you\nreceive for Java](#http-403-java).\n\n### Service account key creation is disabled\n\nYou might encounter the following error while trying to generate a service\naccount key for authentication: \n\n```\nService account key creation is disabled.\n\nThe organization policy constraint 'iam.disableServiceAccountKeyCreation' is\nenforced. This constraint disables the creation of new service account keys.\n```\n\nTo resolve this issue, contact your organization policy administrator and\nrequest an exception to the organization policy constraint that disables the\ncreation of service account keys.\n\nCan't download packages\n-----------------------\n\nIf you're experiencing issues downloading packages, complete the following:\n\n- Check whether the package exists in the repository. For instructions, see [Validate your\n connection](/assured-open-source-software/docs/validate-connection).\n- For the free tier, check whether you're downloading a supported package. For more information, see [List of supported Java and Python packages for the\n Assured OSS free\n tier](/assured-open-source-software/docs/supported-packages).\n- Verify that your environment supports the package and version. Build tools such as `pip` only download supported packages."]]
