amazon-web-services - AWS YAML 存储桶策略语法无效

Question

尝试部署此部分时收到错误消息:

  OutBucketPolicyCredentials:
    Type: AWS::S3::BucketPolicy
    Properties:
      Bucket:
        Ref: "SnowflakeStagingBucket2"
      PolicyDocument:
        Statement:
          -
            Action:
              - "s3:GetObject"
            Effect: "Allow"
            Resource:
              Fn::Join:
                - ""
                -
                  - "arn:aws:s3:::"
                  -
                    Ref: "SnowflakeStagingBucket2"
                  - "/*"
            Principal: "di-snowflake-shipper-ShipperRole-1AVH7OJ0CDNSY"

为什么语法错误？

Answer 1

评论删除了格式，所以我只是在此处重新发布。我假设 di-snowflake-shipper-ShipperRole-1AVH7OJ0CDNSY 是 IAM 角色，请尝试使用以下代码片段。

 Principal:
    AWS:
       - "arn:aws:iam::${AWS::AccountId}:role/di-snowflake-shipper-ShipperRole-1AVH7OJ0CDNSY"