简体繁体 English

AWS step function 角色需要包含哪些权限才能启用 X 射线？

[英]What permissions need to be included for AWS step function role to enable X-ray?

原文 2021-01-25 19:42:59 1 1 amazon-web-services/ amazon-iam/ state-machine/ aws-step-functions/ x-ray

I'm currently looking at some resource on how to enable X-ray for my stepfunction statemachine, from this tutorial: https://docs.aws.amazon.com/step-functions/latest/dg/concepts-xray-tracing.html#xray-concept-create我目前正在查看有关如何为我的 stepfunction 状态机启用 X 射线的一些资源，来自本教程： https://docs.aws.amazon.com/step-functions/latest/dg/concepts-xray-tracing。 html#xray-concept-create

"When you enable X-Ray for an existing state machine, you must ensure that you have an IAM policy that grants sufficient permissions for X-Ray to perform traces. You can either add one manually, or generate one. For more information, see the IAM policy section for X-Ray." “当您为现有的 state 机器启用 X-Ray 时，您必须确保您有一个 IAM 策略，该策略授予 X-Ray 执行跟踪的足够权限。您可以手动添加一个，也可以生成一个。有关更多信息，请参阅X-Ray 的 IAM 政策部分。”

There are so many permissions for X-ray, I wonder which ones I need? X-ray有这么多权限，不知道我需要哪些？ I'd like to add them to my step function role manually, but I don't want to add all of them including the unneeded ones.我想手动将它们添加到我的步骤 function 角色中，但我不想添加所有这些，包括不需要的。

1 个解决方案

Following links will guide you based on your use-case:以下链接将根据您的用例为您提供指导：

Basic IAM permissions policy , I would suggest to start with this. 基本 IAM 权限策略，我建议从这个开始。 Then reduce/add based on your use-cases.然后根据您的用例减少/添加。
How AWS X-Ray works with IAM , a bit in details. AWS X-Ray 如何与 IAM 一起工作，有点详细。

Furthermore, you can use AWS Policy Generator to make things easy.此外，您可以使用AWS 策略生成器让事情变得简单。 Here, AWS X-Ray actions are listed under Type of Policy as IAM Policy此处，AWS X-Ray 操作列在策略类型下作为 IAM 策略