amazon-web-services - Lambda SAM 部署在 'EC2DescribePolicy' 处给出错误 'policyArn' 未能满足约束 : Member must have length greater than or equal to 20

Question

我正在使用 AWS SAM 通过 cloudformation 部署 Lambda。 lambda 使用 StartInstancesCommand、StopInstancesCommand 和DescribeInstancesCommand API 按计划打开和关闭实例。

同时使用 EC2DescribePolicy 或 EC2FullAccessPolicy SAM 策略模板时，我遇到了以下错误:

sam 部署

1 validation error detected: Value'EC2DescribePolicy' at 'policyArn'failed to satisfy constraint:Member must have length greaterthan or equal to 20 (Service:AmazonIdentityManagement;Status Code: 400; Error Code: ValidationError;

如何修复此错误？我必须手动指定“policyArn”吗？

我的模板.yaml:

AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Description: >
  test-function

Resources:
  TestFunction:
    Type: AWS::Serverless::Function
    Properties:
      CodeUri: test-function/
      Handler: app.lambdaHandler
      Runtime: nodejs16.x
      MemorySize: 512
      Timeout: 60
      Policies:
        - AWSLambdaBasicExecutionRole
        - AWSLambdaVPCAccessExecutionRole
        - EC2DescribePolicy
      Architectures:
        - x86_64
      Events:
        ScheduledEvent:
          Type: Schedule
          Properties:
            Schedule: cron(0 8 * * ? *)
            Enabled: True

版本信息:

$ sam --version
SAM CLI, version 1.60.0
$ node --version
v16.17.0
$ docker --version
Docker version 20.10.17, build 100c701
$ python3 --version
Python 3.9.6

Answer 1

documentation状态:

For every policy template you specify in your AWS SAM template file, you must always specify an object containing the policy template's placeholder values. If a policy template does not require any placeholder values, you must specify an empty object.

所以你应该:

Policies:
  - AWSLambdaBasicExecutionRole
  - AWSLambdaVPCAccessExecutionRole
  - EC2DescribePolicy : {}