Debezium IAM 角色问题的 AWS MSK 连接器

Question

I want creat a connector for Debezium. I am unable to create a kafka connector using the AWSServiceRoleForKafkaConnect role. Here is the error I get when clicking Create Connector on the last page in the form:

Error creating connector There was a problem creating a connector. If the problem persists, contact AWS Support. API response Invalid parameter serviceExecutionRoleArn: A service linked role ARN cannot be provided as service execution role ARN.

Here is the document which I am following: https://aws.amazon.com/tr/blogs/aws/introducing-amazon-msk-connect-stream-data-to-and-from-your-apache-kafka-clusters-using-managed-connectors/

How Can I fix this problem? Thanks!

Answer 1

I'm having the same issue in the last few days. I have created Kafka connectors in early Jan and December with no issues using the provided AWSServiceRoleForKafkaConnect role.

I tried creating the new connectors with the same config on the same cluster using the same role that worked before and now I'm also getting the same error:

 Invalid parameter serviceExecutionRoleArn: A service linked role ARN cannot be provided as service execution role ARN.

I think this may be an issue on the AWS side.

Answer 2

I had a similar problem while creating MSK Connector to S3 bucket. You can solve it using instructions from this tutorial: https://docs.aws.amazon.com/msk/latest/developerguide/mkc-tutorial-setup.html

You have to create new IAM Role and edit Trust relationship:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "kafkaconnect.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}