Question

我正在 AWS FileGateway 上尝试刷新缓存。我已经使用 AWSStorageGatewayClientBuilder 对象构建了AWSStorageGateway -

AWSStorageGateway awsStorageGateway = AWSStorageGatewayClientBuilder.standard()
                .withRegion(region)
                .withCredentials(new AWSStaticCredentialsProvider(credentials))
                .build();

另外，我正在使用它来构建ARN -

RefreshCacheRequest refreshCacheRequest = new RefreshCacheRequest();
refreshCacheRequest.setFileShareARN("arn:aws:storagegateway:"+region+":"+awsId+":"+shareID);

ARN的格式为

arn:aws:storagegateway:region:account-id:share/share-id

最后，我正在刷新缓存，如0

awsStorageGateway.refreshCache(refreshCacheRequest);

我得到了这个例外 -

com.amazonaws.services.storagegateway.model.AWSStorageGatewayException: User: arn:aws:iam::12345:user/system/func-user is not authorized to perform: storagegateway:RefreshCache on resource: arn:aws:storagegateway:region:account-id:share-id (Service: AWSStorageGateway; Status Code: 400; Error Code: AccessDeniedException; Request ID:request ID)

我在这里遗漏了什么吗？

我非常确定IAM访问密钥，我有其中的优势。

PS - 我给出的帐号ID是IAM的访问密钥

刷新AWS FileGateWay的缓存

0 个答案: