aws-lambda - 调用 amazondax 服务时获取权限异常

Question

我正在使用来自 AWS Lambda 方法的 amazondax 服务，并收到指示缺少权限的异常 - 但我不知道为此需要哪些权限。 Lambda 方法和我的 DAX 集群都设置了相同的 VPC 子网和安全组。我收到以下异常:

[ERROR] 2018-12-11T23:06:50.457Z    70c80374-fd99-11e8-bac1-318371e7b8ed    Failed to retrieve endpoints
Traceback (most recent call last):
File "/var/task/amazondax/Cluster.py", line 211, in _pull
new_endpoints = self._pull_from(ip, port)
File "/var/task/amazondax/Cluster.py", line 222, in _pull_from
endpoints = client.endpoints()
File "/var/task/amazondax/DaxClient.py", line 192, in endpoints
return self._decode_result('endpoints', None, Assemblers.endpoints_455855874_1, tube)
File "/var/task/amazondax/DaxClient.py", line 227, in _decode_result
return self._handle_error(operation_name, tube)
File "/var/task/amazondax/DaxClient.py", line 233, in _handle_error
raise DaxServiceError(operation_name, message, codes, *exc_info)
amazondax.DaxError.DaxServiceError: An error occurred (Unknown) when calling the endpoints operation: Client does not have permission to invoke Endpoints

我认为最后一行“Client does not have permission...”是关键所在，但我无法确定到底需要哪些权限。

这是破坏的代码:

dax = amazondax.AmazonDaxClient(session, region_name='us-east-1', endpoint_url='mydaxcluster.blahblahblah.cache.amazonaws.com:8111')

Answer 1

您需要将所需操作的“dax:”权限添加到与 session 中使用的 IAM 用户关联的策略中。