Amazon web services 如何在AWS IAM策略中为多个语句编写单个条件?

Amazon web services 如何在AWS IAM策略中为多个语句编写单个条件?,amazon-web-services,amazon-iam,Amazon Web Services,Amazon Iam,我需要为策略过期添加条件: { "Version": "2012-10-17", "Statement": [ { "Action": "ec2:*", "Effect": "Allow", "Resource": "*" }, { "Effect": "Allow", "Action": "elasticload

我需要为策略过期添加条件:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "ec2:*",
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": "elasticloadbalancing:*",
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": "cloudwatch:*",
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": "autoscaling:*",
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": "s3:*",
            "Resource": "*"
        }
    ]
}
试试这个(我没有测试):


我不想在所有语句块中添加条件,因为在我的例子中有太多的语句块。它可以工作,但在我的例子中,有太多的语句块具有不同的“资源”和“条件”。所以我不能把所有的“行动”整合到一个整体中。
"Condition": {
    "DateGreaterThan": {
        "aws:CurrentTime": "2020-01-22T12:29:59Z"
    },
    "DateLessThan": {
        "aws:CurrentTime": "2020-11-22T19:35:00Z"
    }
}
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "ec2:*",
                "elasticloadbalancing:*",
                "cloudwatch:*",
                "autoscaling:*",
                "s3:*"
            ]
            "Resource": "*",
            "Condition": {
                "DateGreaterThan": {
                    "aws:CurrentTime": "2020-01-22T12:29:59Z"
                },
                "DateLessThan": {
                    "aws:CurrentTime": "2020-11-22T19:35:00Z"
                }
            }
        }
    ]
}