我有一个cloudformation
模板来创建lambda函数和SNS主题。lambda函数执行一些处理并将结果发布到SNS主题。在
为了获得SNS主题的ARN,我使用boto3.client('sns').list_topics()
函数,然后搜索我在模板中设置的SNS主题名。在
但是调用list_topics()
API会给我带来以下错误:
An error occurred (AuthorizationError) when calling the ListTopics operation: User: arn:aws:sts::136732452473:assumed-role/test/severless-btc-update-PriceUpdateFunction-B38KNZMCBGB is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:136732452473:*
如何向cloudformation模板YAML文件中的lambda资源添加ListTopics权限?在
这是我的云形成.yaml文件:
AWSTemplateFormatVersion: "2010-09-09"
Transform: AWS::Serverless-2016-10-31
Description: Bitcoin daily update
Parameters:
PhoneNumber:
Type: String
Description: The phone number recipient of the update, in E.164 (e.g. +919876123456) format.
UTCHour:
Type: String
Default: 3
Description: The hour at which to send the update, in the UTC time zone.
Resources:
PriceUpdateFunction:
Type: AWS::Serverless::Function
Properties:
Handler: main.lambda_handler
Runtime: python3.6
Timeout: 5
CodeUri: main.py
Environment:
Variables:
PHONE_NUMBER: !Ref PhoneNumber
Events:
ScheduledEvent:
Type: Schedule
Properties:
Schedule: !Join [' ', ['cron(0', !Ref UTCHour, '* * ? *)']]
Policies:
- SNSPublishMessagePolicy:
TopicName: !GetAtt SNSTopic.TopicName
SNSTopic:
Type: "AWS::SNS::Topic"
Properties:
TopicName: "sendSMS"
DisplayName: "BitcoinPriceTopic"
Subscription:
-
Endpoint: !Ref PhoneNumber
Protocol: "sms"
您需要定义Lambda执行角色并为函数分配适当的权限。应该有一个
Role
属性AWS::Serverless::Function
Role: !GetAtt LambdaExecutionRole.Arn
然后在模板中创建引用的角色:
根据需要调整
Action
部分中的权限。在相关问题 更多 >
编程相关推荐