用户:未授权执行:cloudformation: descripbestacks

Question

我正在尝试使用此命令serverless deploy将我的Node.js无服务器应用程序部署到AWS，但我一直得到此错误

User: arn:aws:iam::900989174731:user/obafemitayor2 is not authorized to perform: cloudformation:DescribeStacks on resource: arn:aws:cloudformation:eu-central-1:900989174731:stack/app/* because no permissions boundary allows the cloudformation:DescribeStacks action

我已经创建了一个用户，并授予该用户以下权限。

1. AWSLambdaFullAccess
2. AmazonS3FullAccess
3. CloudFrontFullAccess
4. AWSCloudFormationReadOnlyAccess

我还把这个策略添加到我的组

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "Stmt1449904348000",
"Effect": "Allow",
"Action": [
"cloudformation:CreateStack",
"cloudformation:CreateChangeSet",
"cloudformation:ListStacks",
"cloudformation:UpdateStack",
"cloudformation:DescribeChangeSet",
"cloudformation:ExecuteChangeSet"
],
"Resource": [
"*"
]
}
]
}

但是我仍然得到那个错误。什么好主意吗?

Answer 1

这个错误是不言自明的，您的策略中缺少cloudformation:DescribeStacks。