2017-08-24 22 views
1

我有一個以下雲形成腳本,我想將兩個託管策略添加到角色。如何使用雲形成在aws角色中擁有多個管理策略?

--- 
AWSTemplateFormatVersion: '2010-09-09' 
Transform: AWS::Serverless-2016-10-31 
Description: Bringing up the whole stack 
Resources: 
# IAM role 
    PublishingActionExecutionRole: 
    Type: AWS::IAM::Role 
    Properties: 
     ManagedPolicyArns: 
     - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole 
     - arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess 
     AssumeRolePolicyDocument: 
     Version: '2012-10-17' 
     Statement: 
     - Action: 
     - sts:AssumeRole 
     Effect: Allow 
     Principal: 
      Service: 
      - lambda.amazonaws.com 

但是,當我運行這個腳本時,它只是添加第一個策略而不是第二個策略。

任何人都知道它的訣竅嗎?

+0

如果你交換你的兩個策略的順序,並會添加其他策略,或相同的嗎? –

回答

0

該模板似乎工作:

AWSTemplateFormatVersion: "2010-09-09" 
Resources: 
    PublishingActionExecutionRole: 
    Type: "AWS::IAM::Role" 
    Properties: 
     AssumeRolePolicyDocument: 
     Version: "2012-10-17" 
     Statement: 
      - 
      Effect: "Allow" 
      Principal: 
       Service: 
       - "lambda.amazonaws.com" 
      Action: 
       - "sts:AssumeRole" 
     ManagedPolicyArns: 
     - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole 
     - arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess 
相關問題