小编rp1*_*409的帖子

我对 CloudFormation 非常陌生，正在尝试掌握它。作为学习过程的一部分，我尝试构建一个模板来创建 VPC、一个子网并部署面向公众的实例。下面是我在 CF 设计窗口中完成的代码。虽然我的代码验证了，但是构建时间我收到了类似的错误 -

CREATE_FAILED   AWS::EC2::Instance  AR3Web  Property DeviceIndex cannot be empty.
ROLLBACK_IN_PROGRESS    AWS::CloudFormation::Stack  Intro   The following resource(s) failed to create:[IgwAttachment, AR3Web]. . Rollback requested by user. 

我在代码中设置 DeviceIndex: '0' 。有人可以帮我理解我哪里出了问题吗？

提前感谢您的帮助。

我的代码-

---
AWSTemplateFormatVersion: 2010-09-09
Description: Test Stack
Resources:
  AR3VPC:
    Type: 'AWS::EC2::VPC'
    Properties:
      CidrBlock: 10.0.0.0/16
      EnableDnsSupport: 'true'
      EnableDnsHostnames: 'true'
      InstanceTenancy: default
      Tags:
        - Key: Name
          Value: AR3VPC
    Metadata:
      'AWS::CloudFormation::Designer':
        id: baa1b4d4-07ea-4095-b4a4-4925e7c68052
  PublicSubnet1:
    Type: 'AWS::EC2::Subnet'
    Properties:
      VpcId: !Ref AR3VPC
      CidrBlock: 10.0.1.0/24
      MapPublicIpOnLaunch: 'true'
      AvailabilityZone: us-east-1a
    Metadata:
      'AWS::CloudFormation::Designer': …

我正在学习使用 terraform 部署 AWS 基础设施。我编写了下面的代码来创建 IAM 策略-

    resource "aws_iam_role_policy" "s3_access_policy" 
{
  name = "s3_access_policy"
  role = aws_iam_role.s3_access_role.id

  policy = <<EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3.*",
      "Resource": "*"
    }
  ]
}
EOF
}

当我运行 terraform apply 时，出现以下错误 -

Error: Error putting IAM role policy s3_access_policy: MalformedPolicyDocument: Actions/Conditions must be prefaced by a vendor, e.g., iam, sdb, ec2, etc.
        status code: 400, request id: cdd4d629-4f43-450c-a4f1-b6d475e363f0

  on main.tf line 14, in resource "aws_iam_role_policy" "s3_access_policy":
  14: resource "aws_iam_role_policy" "s3_access_policy" …