Amazon cloudformation 仅使用托管云信息策略创建IAM角色
我正在尝试使用现有管理策略创建IAM角色:Amazon cloudformation 仅使用托管云信息策略创建IAM角色,amazon-cloudformation,Amazon Cloudformation,我正在尝试使用现有管理策略创建IAM角色: "SomeRole": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": {}, "ManagedPolicyArns": [ "a
"SomeRole":
{
"Type": "AWS::IAM::Role",
"Properties":
{
"AssumeRolePolicyDocument": {},
"ManagedPolicyArns":
[
"arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess",
"arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess",
"arn:aws:iam::aws:policy/CloudWatchFullAccess"
],
"RoleName": "SomeRole"
}
},
但是它失败了,出现了错误:位置(1,3)的语法错误看起来您必须在
assumerepolicyDocument中有一些值
试试这个
{
"Resources": {
"NewRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": [
"ec2.amazonaws.com"
]
},
"Action": [
"sts:AssumeRole"
]
}
]
},
"ManagedPolicyArns": [
"arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess",
"arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess",
"arn:aws:iam::aws:policy/CloudWatchFullAccess"
]
}
}
}
}
你能提供剩下的模板吗?你能通过JSON linter运行你的模板吗?成功了,泰。有时我真的很痛苦。