AWS 向角色添加内联/托管策略不会立即生效?

时间:2021-05-09 03:26:53

标签: amazon-web-services amazon-iam

假设我有一个包含以下声明的政策:

{
  "Effect": "Deny",
  "Action": "organizations:*",
  "Resource": "*",
}

我正在尝试通过 AWS 开发工具包将此类内联策略添加到角色:

PutRolePolicyRequest request = new PutRolePolicyRequest()
   .withRoleName("TestRole")
   .withPolicyName("TestPolicy")
   .withPolicyDocument("Above in string");
PutRolePolicyResult result = iam.putRolePolicy(request);

// I would need to uncomment below for test to pass
// Thread.sleep(10000)
assertThatThrownBy(() -> {
    awsOrgs.listAccounts(..); 
}).isInstanceOf(AccessDeniedException.class)

注意上面的注释,我必须为 awsOrgs.listAccounts() 添加延迟才能抛出异常,否则测试失败,表明没有抛出异常。这是 AWS 正在发生的某种最终一致性问题吗?

0 个答案:

没有答案