Amazon web services 发生无服务器首次部署错误:HelloLogGroup-用户

Amazon web services 发生无服务器首次部署错误:HelloLogGroup-用户,amazon-web-services,serverless-framework,serverless,Amazon Web Services,Serverless Framework,Serverless,我想使用默认的无服务器模板测试部署无服务器项目,但出现了此错误 An error occurred: HelloLogGroup - User: arn:aws:iam::346468483688:user/crm_development is not authorized to perform: logs:DescribeLogGroups on resource: arn:aws:logs:us-east-1:346468483688:log-group::log-stream: (Ser

我想使用默认的无服务器模板测试部署无服务器项目,但出现了此错误

 An error occurred: HelloLogGroup - User: arn:aws:iam::346468483688:user/crm_development is not authorized to perform: logs:DescribeLogGroups on resource: arn:aws:logs:us-east-1:346468483688:log-group::log-stream: (Service: AWSLogs; Status Code: 400; Error Code: AccessDeniedException; Request ID: cb3894c8-aaca-400b-9862-a610e0cbffc2).

这是一个权限错误。用于部署无服务器项目的用户没有对日志的权限:Describelogroups


要解决此问题,您需要向正在部署服务的用户授予对资源上的logs:Describelogroups的权限arn:aws:logs:us-east-1:346468483688:log group::log stream:

我认为这与ApiGateway权限有关 通过向角色添加权限来解决此问题
iam->roles->selected related code build role->policies->attach policy->select API gateway->read+write

这可能是您缺少了一些让CloudFormation处理日志版本控制和保留的提供程序配置。我建议您在serverless.yml文件的provider部分添加以下配置:

供应商: ... 对数保留天数:14 versionFunctions:true ...
此外,您还可以在讨论中查看它。

它有足够的权限吗?错误是关于访问权限的。您是否在yaml上配置了权限?你能分享你的yamlHave无API网关策略吗。