小编Ver*_*erb的帖子

我看到很多针对此类问题的主题，但无法解决这个问题。

我正在尝试使用附件策略创建 AWS IAM 角色，但我始终遇到此问题：

错误：创建 IAM 角色测试角色时出错：MalformedPolicyDocument：JSON 字符串不得有前导空格

我完全同意文档：

角色：https ://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role

政策附件：https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment

请找到我的配置

resource "aws_iam_instance_profile" "test-role-profile" {
  name = "test-role-profile"
  role = aws_iam_role.test-role.name
}

resource "aws_iam_role" "test-role" {
  name               = "test-role"
  assume_role_policy = <<EOF
  {
    "Version": "2012-10-17",
    "Statement": [
      {
        "Action": "sts:AssumeRole",
        "Principal": {
          "Service": "ecr.amazonaws.com"
        },
        "Effect": "Allow",
        "Sid": ""
      }
    ]
  }
  EOF
}

resource "aws_iam_policy" "test-role-policy" {
  name        = "test-role-policy"
  description = "Test role policy"

  policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    { …