Amazon SP-API 无法扮演我自己的角色？

Question

我正试图使用node.js库连接到Amazon Selling Partners API(SP-API(，但遇到了一个极其奇怪的错误，似乎在告诉我不能承担自己的角色？

CustomError: User: arn:aws:iam::11111:user/bob is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::11111:user/bob

我对AWS还很陌生，但我很确定，这个针对用户的内联策略应该足以满足我想要做的事情，我甚至让它适用于所有资源，而不仅仅是我之前创建的SellingPartners角色：

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": "sts:AssumeRole",
"Resource": "*"
}
]
}

这是我的完整代码，以防有帮助：

const SellingPartnerAPI = require('amazon-sp-api');

(async() => {
try {
let sellingPartner = new SellingPartnerAPI({
region:'na', // The region to use for the SP-API endpoints ("eu", "na" or "fe")
refresh_token:'xxxxxx', // The refresh token of your app user
credentials:{
SELLING_PARTNER_APP_CLIENT_ID:'xxxxx',
SELLING_PARTNER_APP_CLIENT_SECRET:'xxxxx',
AWS_ACCESS_KEY_ID:'xxxx',
AWS_SECRET_ACCESS_KEY:'xxxxx',
AWS_SELLING_PARTNER_ROLE:'arn:aws:iam::11111:user/bob'
}
});
let res = await sellingPartner.callAPI({
operation:'getOrders',
endpoint:'orders'
});
console.log(res);
} catch(e) {
console.log(e);
}
})();

Answer 1

ARNarn:aws:iam::11111:user/bob描述的是用户，而不是角色。

如果客户端期望角色ARN，那么它可能应该类似于arn:aws:iam::11111:role/your-role-name。