Json 简单堆栈策略在CloudFormation上始终无效
我一直在尝试上载以下堆栈策略:Json 简单堆栈策略在CloudFormation上始终无效,json,amazon-web-services,amazon-cloudformation,aws-codepipeline,Json,Amazon Web Services,Amazon Cloudformation,Aws Codepipeline,我一直在尝试上载以下堆栈策略: { "StackPolicy" : { "Statement" : [ { "Effect" : "Allow", "Action" : "Update:*", "Principal": "*", "Resource" : "*" }, { "Effect" : "Deny", "Action" : "Update:*",
{
"StackPolicy" : {
"Statement" : [
{
"Effect" : "Allow",
"Action" : "Update:*",
"Principal": "*",
"Resource" : "*"
},
{
"Effect" : "Deny",
"Action" : "Update:*",
"Principal": "*",
"Resource" : "LogicalResourceId/ReleaseDeploy"
}
]
}
}
但我收到
我还将其简化为对所有资源仅具有Allow
效果,并删除了所有空白,但仍然会得到错误。我做错了什么
{"StackPolicy":{"Statement":[{"Effect":"Allow", "Action":"Update:*", "Principal":"*", "Resource":"*"}]}}
查看提供的示例,它似乎不应该有StackPolicy
键,JS对象中似乎有1个多余的级别。还可以查看并检查提供Version
属性是否有所不同
政策应该是什么样的示例:
{
"Version":"2012-10-17",
"Statement":[{
"Effect":"Allow",
"Action":[
"cloudformation:*"
],
"Resource":"*"
},
{
"Effect":"Deny",
"Action":[
"cloudformation:UpdateStack",
"cloudformation:DeleteStack"
],
"Resource":"arn:aws:cloudformation:us-east-1:123456789012:stack/MyProductionStack/*"
}]
}
删除StackPolicy属性级别已成功!似乎不需要任何版本。谢谢