amazon-web-services - 云形成循环依赖消防水带

Question

我有以下 CloudFormation 模板。以前的更改集已成功创建运动流和所有列出的角色。现在我想添加一个 firehuse 传输流。但我的更改集失败，并显示 FAILED - 资源之间的循环依赖关系:[EventDeliveryStream] 消息。谁能帮我看看我的模板有什么问题吗？

已应用的资源模板:

   AWSTemplateFormatVersion: "2010-09-09"
    Transform: 'AWS::Serverless-2016-10-31'
    Description: XXX

    Resources:
      EventStream:
        Type: "AWS::Kinesis::Stream"
        Properties:
          Name: "event-stream"
          RetentionPeriodHours: 24
          ShardCount: 1

     KinesisReadOnlyAccessRole:
        Type: "AWS::IAM::Role"
        Properties:
          RoleName: "kinesis-read-only-access-role"
          Path: "/"
          AssumeRolePolicyDocument:
            Version: "2012-10-17"
            Statement:
            -
              Effect: "Allow"
              Principal:
                Service: "firehose.amazonaws.com"
              Action: "sts:AssumeRole"
          ManagedPolicyArns:
          - "arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess"
      ElasticSearchRole:
        Type: "AWS::IAM::Role"
        Properties:
          RoleName: "elastic-search-role"
          Path: "/"
          AssumeRolePolicyDocument:
            Version: "2012-10-17"
            Statement:
            -
              Effect: "Allow"
              Principal:
                Service: "firehose.amazonaws.com"
              Action: "sts:AssumeRole"
          ManagedPolicyArns:
          - "arn:aws:iam::aws:policy/AmazonESFullAccess"
      FailedDataS3BucketRole:
        Type: "AWS::IAM::Role"
        Properties:
          RoleName: "failed-data-s3-bucket-role"
          Path: "/"
          AssumeRolePolicyDocument:
            Version: "2012-10-17"
            Statement:
            -
              Effect: "Allow"
              Principal:
                Service: "firehose.amazonaws.com"
              Action: "sts:AssumeRole"
          ManagedPolicyArns:
          - "arn:aws:iam::aws:policy/AmazonS3FullAccess"

我想添加的新资源模板:

     EventDeliveryStream:
        Type: "AWS::KinesisFirehose::DeliveryStream"
        Properties:
          DeliveryStreamName: "kinesis-to-elastic"
          DeliveryStreamType: KinesisStreamAsSource
          KinesisStreamSourceConfiguration:
            KinesisStreamARN: !Ref EventStream
            RoleARN: !Ref KinesisReadOnlyAccessRole
          ElasticsearchDestinationConfiguration:
            DomainARN: "arn:aws:es:us-east-1:xxx:domain/xxx-data"
            RoleARN: !Ref ElasticSearchRole
            IndexName: "kinesis-events"
            TypeName: "object"
            IndexRotationPeriod: "NoRotation"
            RetryOptions:
              DurationInSeconds: "60"
            S3BackupMode: "FailedDocumentsOnly"
            BufferingHints:
              IntervalInSeconds: "60"
              SizeInMBs: "5"
            CloudWatchLoggingOptions:
              Enabled: true
              LogGroupName: "/aws/kinesisfirehose/event-stream-firehose"
              LogStreamName: "kinesis-to-elastic"
            S3Configuration:
              BucketARN:
                Ref: "arn:aws:s3:::etl-failed-data"
              RoleARN: !Ref FailedDataS3BucketRole
              Prefix: "firehose/"
              BufferingHints:
                IntervalInSeconds: "60"
                SizeInMBs: "5"
              CompressionFormat: "UNCOMPRESSED"

Answer 1

问题出在无效模板中

BucketARN:
   Ref: "arn:aws:s3:::etl-failed-data"

并且错误消息完全具有误导性