没有执行权限(sdb:ListDomains)

时间:2016-04-21 08:38:34

标签: amazon-web-services amazon-iam

当我运行Kinesis示例时,我收到此错误:

Caught Exception: User (arn:aws:iam::xxxxxxxxxxxx:user/user_name) does not have permission to perform (sdb:ListDomains) on resource (arn:aws:sdb:us-west-2:xxxxxxxxxxxx:domain/). Contact account owner.

我需要为用户附加什么策略名称才能授予执行执行权限(sdb:ListDomains)?

1 个答案:

答案 0 :(得分:2)

只有6项AWS管理政策明确提及sdb

 - AmazonElasticMapReduceReadOnlyAccess
 - AmazonElasticMapReduceRole 
 - AmazonElasticMapReduceforEC2Role
 - ReadOnlyAccess
 - AmazonElasticMapReduceFullAccess
 - SecurityAudit

ReadOnlyAccess已附加sdb:List*,因此如果您正在运行示例应用,这似乎是最明智的。

否则创建自己的政策:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "sdb:ListDomains"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}