Amazon web services SAM模板中的IAM角色
如何在SAM模板中创建IAM角色类似于我在SAM包中所做的。 我尝试了以下方法:Amazon web services SAM模板中的IAM角色,amazon-web-services,serverless,Amazon Web Services,Serverless,如何在SAM模板中创建IAM角色类似于我在SAM包中所做的。 我尝试了以下方法: "lambdaFunctionRole": { "Type": "AWS::IAM::Role", "Properties": { "AssumeRolePolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Effe
"lambdaFunctionRole": {
"Type": "AWS::IAM::Role",
"Properties": {
"AssumeRolePolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": [
"lambda.amazonaws.com",
"apigateway.amazonaws.com"
]
},
"Action": "sts:AssumeRole"
}
]
},
"ManagedPolicyArns": [
{
"Ref": "lambdaBasePolicy"
}
],
"Policies": [
{
"PolicyName": "root",
"PolicyDocument": {
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents"
],
"Resource": "arn:aws:logs:*:*:*"
},
{
"Effect": "Allow",
"Action": [
"s3:*",
"dynamodb:*",
"iam:ListRoles",
"ses:*",
"events:*"
],
"Resource": "*"
}
]
}
}
]
}
}
它向我抛出一个错误:com.amazonaws.serverlessappsrepo.template.InvalidTemplateException:名为[lambdFunctionRole]的资源无效。AWS::Serverless::Role不是受支持的无服务器应用程序存储库类型。发布到无服务器应用程序repo时,需要注意仅使用您的SAM模板 在您的情况下,您可以跳过创建作为独立资源的
lambdfunctionrole
,而只在函数资源定义中内联创建它
"lambdaFunction": {
"Type": "AWS::Serverless::Function",
"Policies": [
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents"
],
"Resource": "arn:aws:logs:*:*:*"
},
{
"Effect": "Allow",
"Action": [
"s3:*",
"dynamodb:*",
"iam:ListRoles",
"ses:*",
"events:*"
],
"Resource": "*"
}
]
}
]
}
请注意,我只复制了角色中策略的PolicyDocument
部分。请参阅中的“策略”部分