创建 vpc 链接 aws 所需的权限

Question

我正在尝试创建 vpc 链接以将 api 网关与我的 ec2 实例连接起来。我已经创建了网络负载均衡器。现在尝试在 api 网关中创建 VPC 链接。但是在创建它时会引发错误：

VPC link creation failed
User does not have sufficient permissions to create VPC endpoint services.

创建 VPC 链接需要哪些权限？

谢谢！

Answer 1

创建VPCLink所需的权限详见AWS docs，可以封装在以下IAM策略中：

{  
   "Version":"2012-10-17",
   "Statement":[  
      {  
         "Effect":"Allow",
         "Action":[  
            "ec2:CreateVpcEndpointServiceConfiguration",
            "ec2:DeleteVpcEndpointServiceConfigurations",
            "ec2:DescribeVpcEndpointServiceConfigurations",
            "ec2:ModifyVpcEndpointServicePermissions"
         ],
         "Resource":"*"
      },
      {  
         "Effect":"Allow",
         "Action":[  
            "elasticloadbalancing:DescribeLoadBalancers"
         ],
         "Resource":"*"
      }
   ]
}