amazon-web-services - 无法使用 Cloudformation 创建 KMS

Question

我有下面的代码来通过 CF 创建 KMS，但是我从本节中收到模板错误。这里有什么遗漏的吗？

KmsKey:
    Type: AWS::KMS::Key
    Properties:
      Description: KMS-Key
      KeyPolicy:
        Version: "2012-10-17"
        Id: encryption-key
        EnableKeyRotation: "True"
        PendingWindowInDays: 7
        Statement:
          - Sid: Allow administration of the key
            Effect: Allow
            Resource: "*"
            Principal:
              AWS: arn:aws:iam::#{AWS::AccountId}:root
            Action:
              - kms:Create*
              - kms:Describe*
              - kms:Enable*
              - kms:List*
              - kms:Put*
              - kms:Update*
              - kms:Revoke*
              - kms:Disable*
              - kms:Get*
              - kms:Delete*
              - kms:ScheduleKeyDeletion
              - kms:CancelKeyDeletion

Answer 1

目前唯一明显的是以下内容:

AWS: arn:aws:iam::#{AWS::AccountId}:root

应该是:

AWS: !Sub "arn:aws:iam::${AWS::AccountId}:root"