如何在 aws iot 配置模板中将多个策略设置为策略名称

Question

我正在尝试创建一个即时配置模板并希望分配多个策略名称，有什么方法可以包含它。 下面是模板

{
  "Parameters": {
    "AWS::IoT::Certificate::Country": {
      "Type": "String"
    },
    "AWS::IoT::Certificate::Id": {
      "Type": "String"
    },
    "AWS::IoT::Certificate::CommonName": {
      "Type": "String"
    }
  },
  "Resources": {
    "thing": {
      "Type": "AWS::IoT::Thing",
      "Properties": {
        "ThingName": {
          "Ref": "AWS::IoT::Certificate::CommonName"
        },
        "AttributePayload": {
          "version": "v1",
          "country": {
            "Ref": "AWS::IoT::Certificate::Country"
          }
        }
      }
    },
    "certificate": {
      "Type": "AWS::IoT::Certificate",
      "Properties": {
        "CertificateId": {
          "Ref": "AWS::IoT::Certificate::Id"
        },
        "Status": "ACTIVE"
      }
    },
    "policy": {
      "Type": "AWS::IoT::Policy",
      "Properties": {
        "PolicyName": "PolicyOne"
      }
    }
  }
}

我想包括 PolicyTwo 有什么方法可以实现这一点，我已经尝试过类似下面的方法，但看起来像模板错误

{
  "Parameters": {
    "AWS::IoT::Certificate::Country": {
      "Type": "String"
    },
    "AWS::IoT::Certificate::Id": {
      "Type": "String"
    },
    "AWS::IoT::Certificate::CommonName": {
      "Type": "String"
    }
  },
  "Resources": {
    "thing": {
      "Type": "AWS::IoT::Thing",
      "Properties": {
        "ThingName": {
          "Ref": "AWS::IoT::Certificate::CommonName"
        },
        "AttributePayload": {
          "version": "v1",
          "country": {
            "Ref": "AWS::IoT::Certificate::Country"
          }
        }
      }
    },
    "certificate": {
      "Type": "AWS::IoT::Certificate",
      "Properties": {
        "CertificateId": {
          "Ref": "AWS::IoT::Certificate::Id"
        },
        "Status": "ACTIVE"
      }
    },
    "policy": {
      "Type": "AWS::IoT::Policy",
      "Properties": [
        {
            "PolicyName": "PolicyOne"
        },
        {
            "PolicyName": "PolicyTwo"
        }
      ]
    }
  }
}

Answer 1

您可以通过在配置模板中执行以下操作来创建多个AWS::IoT::Policy资源：

{
    "Parameters": {
        "ThingName": {
            "Type": "String"
        },
        "CertificateId": {
            "Type": "String"
        }
    },
    "Resources": {
        "thing": {
            "Type": "AWS::IoT::Thing",
            "Properties": {
                "ThingName": {
                    "Ref": "ThingName"
                }
            }
        },
        "certificate": {
            "Type": "AWS::IoT::Certificate",
            "Properties": {
                "CertificateId": {
                    "Ref": "CertificateId"
                },
                "Status": "ACTIVE"
            }
        },
        "policy1": {
            "Type": "AWS::IoT::Policy",
            "Properties": {
                "PolicyName": "MyFirstIoTPolicy"
            }
        },
        "policy2": {
            "Type": "AWS::IoT::Policy",
            "Properties": {
                "PolicyName": "AnotherIoTPolicy"
            }
        }
    }
}