amazon-web-services - AWS信任策略已禁止字段Principal

Question

我正在尝试创建一个 IAM 角色并根据 Attach an AWS IAM Role to an Existing Amazon EC2 Instance by Using the AWS CLI 将其分配给 EC2 实例.

该政策如下所示:

{
 "Version": "2012-10-17",
 "Statement": [
 {
    "Effect": "Allow",
    "Principal": {
    "Service": "ec2.amazonaws.com"
    },
    "Action": "sts:AssumeRole"
  }
 ]

}

但它给出了这个错误:

This policy contains the following error: Has prohibited field Principal

这里有一个类似的问题，但无法解决此问题。

如有任何帮助，我们将不胜感激。

Answer 1

尝试更新“信任关系”或与“信任策略”相同时遇到相同的问题。“委托(delegate)人”仅在“信托政策”中发挥作用。您可能错误地更新了权限选项卡下的正常策略。尝试更新“信任关系”选项卡下的策略，如下所示:

    {
      "Version": "2012-10-17",
      "Statement": [
      {
         "Effect": "Allow",
         "Principal": {
           "Service": [
           "ec2.amazonaws.com",
           "lambda.amazonaws.com"
           ]
          },
         "Action": "sts:AssumeRole"
       }
     ] 
   }