[英]IAM Role Conditions in AWS CDK Python
I am creating a new IAM Role custom policy, but it do a rollback with the reason: MalformedPolicyDocument
我正在创建一个新的 IAM 角色自定义策略,但它会回滚,原因是:
MalformedPolicyDocument
myrole = iam.Role(self,config['CUSTOM_POLICY']['ROLE'],
assumed_by=iam.ServicePrincipal('ec2.amazonaws.com'),
role_name=config['CUSTOM_POLICY']['NAME']
)
myrole.add_to_policy(
iam.PolicyStatement(
effect=iam.Effect.ALLOW,
resources=['arn:aws:s3:::MyBucket/*'],
actions=[
's3:CreateBucket',
's3:GetObject',
's3:ListBucket',
's3:PutObject'
],
conditions=[
{
'aws:SourceIp':'192.10.10.10/32'
}
]
)
)
If I delete the conditions it works, what is the correct syntax considering conditionals?如果我删除它有效的条件,考虑条件的正确语法是什么?
It looks like you're leaving out the condition operator .看起来您忽略了条件运算符。 Are you looking for something like:
您是否正在寻找类似的东西:
conditions=[
{
"NotIpAddress": {
"aws:SourceIp": ["192.10.10.10/32"]
}
}
]
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.