无法将 RDS 快照导出到 S3：不允许主体 export.rds.amazonaws.com 承担 IAM 角色

Question

尽管我拥有正确的 IAM 角色，但当我尝试将 RDS 快照上传到 S3（位于同一区域）时出现此错误：

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "export.rds.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

错误信息：

Your request to export snapshot to S3 has failed.
The Principal export.rds.amazonaws.com isn't allowed to assume the IAM 
role arn:aws:iam::030578524176:role/service-role/rds-export-role or 
the IAM role arn:aws:iam::030578524176:role/service-role/rds-export- 
role doesn't exist.

Answer 1

您好，请在您正在使用的 IAM 角色的信任关系中添加以下内容

“服务”：“export.rds.amazonaws.com”

https://aws.amazon.com/premiumsupport/knowledge-center/rds-mysql-export-snapshot/