AWS KMS cloudformation模板标签

时间:2019-09-14 05:09:58

标签: amazon-web-services tags yaml amazon-cloudformation

我正在尝试创建用于KMS密钥创建的cloudformation模板。尽管代码没有标签也能正常工作,但是当我尝试包含标签时,它弹出了一个错误,提示“模板包含错误。:模板格式错误:YAML格式不正确。(第30行,第1栏)” 不知道这里到底出了什么问题。非常感谢您的帮助。谢谢。这是模板:

AWSTemplateFormatVersion: "2010-09-09"
Resources:
  akscmk:
    Type: AWS::KMS::Key
    Properties:
      Description: "Encrypt sensitive data for Billboard site."
      KeyPolicy:
        Version: 2012-10-17
        Id: key-default-1
        Statement:
          - Sid: "Allow administration of the key"
            Effect: Allow
            Principal:
              AWS: "arn:aws:iam::1234567890:root"
            Action:
              - "kms:*"
            Resource: "*"
          - Sid: "Allow use of the key"
            Effect: Allow
            Principal:
              AWS: 'arn:aws:iam::0987654321:user/devuser'
            Action:
              - "kms:Encrypt"
              - "kms:Decrypt"
              - "kms:ReEncrypt"
              - "kms:GenerateDataKey*"
              - "kms:DescribeKey"
            Resource: "*"
      Tags:
        - Key: country
          Value: india
  KeyAlias:
    Type: 'AWS::KMS::Alias'
    Properties:
      AliasName: alias/testcmk
      TargetKeyId: !Ref akscmk

1 个答案:

答案 0 :(得分:0)

documentation中,标记键和值都用引号引起来,键入String。

Tags: 
  - 
    Key: "keyname1"
    Value: "value1"
  - 
    Key: "keyname2"
    Value: "value2"