amazon-web-services - 指定的 groupName 值无效。它必须仅包含字母数字字符和/或以下 : +=, .@_-

Question

我正在尝试通过 Cloudformation 编写 IAM 策略。我尝试通过下面的 yaml 文件进行部署。它无法构建并出现错误。

但是，组名看起来没有任何这些字符。(+=,.@_-)你知道如何解决吗？

错误指定的 groupName 值无效。它必须仅包含字母数字字符和/或以下内容:+=,.@_-(服务:AmazonIdentityManagement；状态代码:400；错误代码:ValidationError；请求 ID:id；代理:null)

Description: ""

Metadata:
  Generator: former2

Resources:
  MyIAMPolicy:
    Type: AWS::IAM::Policy
    Properties:
      PolicyName: TestLogPolicy
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Action:
              - logs:CreateLogGroup
            Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:test_api-app-test:*"
          - Effect: Allow
            Action:
              - logs:CreateLogStream
              - logs:PutLogEvents
            Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:test_api-app-test:*"
          - Effect: Allow
            Action:
              - logs:CreateExportTask
            Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:test_api-app-test:*"
      Groups:
        - !Sub "arn:aws:iam::${AWS::AccountId}:group/createCloudFormationTest"```

Answer 1

根据documentation :

Groups

The name of the group to associate the policy with.

因此您应该指定组的名称，而不是其 ARN。