amazon-web-services - AWS - DecodeAuthorizationMessage 未获授权解码消息

Question

尽管我是该帐户的管理员，但我在特定 EC2 上添加了如下 IAM 角色，但仍然遇到相同的错误:

An error occurred (InvalidAuthorizationMessageException) when calling the DecodeAuthorizationMessage operation: Not authorized to decode message

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "sts:DecodeAuthorizationMessage"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

为什么我无法解码错误消息？

Answer 1

此错误消息具有误导性。您有权对消息进行解码，但发送的消息无效以进行解码。

InvalidAuthorizationMessage
The error returned if the message passed to DecodeAuthorizationMessage was invalid. This can happen if the token contains invalid characters, such as linebreaks.

如果您无权执行该操作，您将收到类似于以下内容的错误消息:

A client error (AccessDenied) occurred when calling the DecodeAuthorizationMessage operation

引用

API_DecodeAuthorizationMessage

Troubleshoot IAM Policy Issues