使用云生成将文件从S3桶复制到EC2 home

Question

我正在尝试将文件从S3桶复制到EC2主目录。我用这个sofanswer的帮助写了一个脚本

然而，在我的情况下，脚本正在执行没有任何错误，但我无法看到文件在我的实例中复制。有人能帮我弄清楚我错过了什么吗?

云形成脚本:

Properties:
ImageId: !FindInMap [Region2AMI, !Ref 'AWS::Region', 'AMI']
InstanceType: t2.micro
SecurityGroups:
- !Ref WebserverSecurityGroup
Tags:
- Key: Name
Value: Amazon Linux w/ nginx included -2
KeyName: !Ref KeyName
UserData:
'Fn::Base64': !Sub |
#!/bin/bash -x
yum update -y aws-cfn-bootstrap
sudo yum install git -y
sudo yum update -y
sudo yum install nginx -y
sudo service nginx enable
sudo service nginx start
mkdir /home/ec2-user/s3-dist
aws s3 cp s3://ai-dashboard-bucket/dist.zip /tmp
unzip -d /home/ec2-user/s3-dist /tmp/dist.zip
/opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource EC2Instance --region ${AWS::Region}  --configSets InstallAndConfig

编辑:我检查了日志文件，这是我得到的错误。我检查了日志，发现了以下错误

aws s3 sync s3://ai-dashboard-bucket/dist.zip/home/ec2-user fatal错误:无法找到凭据

我如何传递凭证?

谢谢你的帮助。

Answer 1

看起来IAM实例配置文件没有访问ai-dashboard-bucket中的对象的权限。

尝试将IAM实例配置文件添加到EC2实例

Resources:
InstanceRole:
Type: AWS::IAM::Role
Properties: 
AssumeRolePolicyDocument:
Version: "2012-10-17"
Statement:
- Effect: Allow
Principal:
Service:
- ec2.amazonaws.com
Action:
- 'sts:AssumeRole'
Policies: 
- PolicyName: root
PolicyDocument:
Version: "2012-10-17"
Statement:
- Effect: Allow
Action: 's3:Get*'
Resource: !Sub 'arn:${AWS::Partition}:s3:::ai-dashboard-bucket/*'
InstanceProfile:
Type: AWS::IAM::InstanceProfile
Properties:
Roles: 
- !Ref InstanceRole
Ec2Instance:
Type: AWS::EC2::Instance
Properties:
ImageId: !FindInMap [Region2AMI, !Ref 'AWS::Region', 'AMI']
InstanceType: t2.micro
IamInstanceProfile: !GetAtt InstanceRole.Arn  # Using the role created above
SecurityGroups:
- !Ref WebserverSecurityGroup
Tags:
- Key: Name
Value: Amazon Linux w/ nginx included -2
KeyName: !Ref KeyName
UserData:
'Fn::Base64': !Sub |
#!/bin/bash -x
yum update -y aws-cfn-bootstrap
sudo yum install git -y
sudo yum update -y
sudo yum install nginx -y
sudo service nginx enable
sudo service nginx start
mkdir /home/ec2-user/s3-dist
aws s3 cp s3://ai-dashboard-bucket/dist.zip /tmp
unzip -d /home/ec2-user/s3-dist /tmp/dist.zip
/opt/aws/bin/cfn-init -v --stack ${AWS::StackName} --resource EC2Instance --region ${AWS::Region}  --configSets InstallAndConfig