如何使用云形成在一个 aws 角色中拥有多个管理策略?



我有一个以下云形成脚本,我想向一个角色添加两个托管策略。

---
AWSTemplateFormatVersion: '2010-09-09'
Transform: AWS::Serverless-2016-10-31
Description: Bringing up the whole stack
Resources:
# IAM role
PublishingActionExecutionRole:
Type: AWS::IAM::Role
Properties:
ManagedPolicyArns:
- arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
- arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess
AssumeRolePolicyDocument:
Version: '2012-10-17'
Statement:
- Action:
- sts:AssumeRole
Effect: Allow
Principal:
Service:
- lambda.amazonaws.com

但是,当我运行此脚本时,它只会添加第一个策略而不是第二个策略。

有人知道它的诀窍吗?

这个模板似乎有效:

AWSTemplateFormatVersion: "2010-09-09"
Resources: 
PublishingActionExecutionRole: 
Type: "AWS::IAM::Role"
Properties: 
AssumeRolePolicyDocument: 
Version: "2012-10-17"
Statement: 
- 
Effect: "Allow"
Principal: 
Service: 
- "lambda.amazonaws.com"
Action: 
- "sts:AssumeRole"
ManagedPolicyArns:
- arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
- arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess

相关内容

最新更新