【发布时间】:2021-02-04 23:49:23
【问题描述】:
我可以零问题地对以下内容进行 Terraform 规划:
resource "aws_iam_group_policy" "devops-admin-write" {
group = data.aws_iam_group.devops-admin-group.group_name
policy = <<POLICY
{
"Version": "2020-10-21",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": [
"arn:aws:s3:::bucketname",
"arn:aws:s3:::bucketname/*"
]
}
]
}
POLICY
}
...但是当我应用 Terraform 时,我得到:“错误:放置 IAM 组策略时出错 terraform-20201022014517696700000001:MalformedPolicyDocument:策略中的语法错误。 状态码:400,请求 ID:d531aabd-839a-4ebb-9813-b37d7dcad21a"
我认为语法错误显然出在政策本身。但我找不到它。有什么想法吗?
【问题讨论】:
标签: amazon-web-services amazon-s3 terraform