属性 Roles 的值必须是 List of String || 类型AWS SAM

Question

在尝试部署 AWS SAM 时，堆栈创建失败并出现以下错误：

属性 Roles 的值必须是字符串列表类型

由于模板文件非常大，我只为策略部分提供部分

  Policies:
    Type: AWS::IAM::Policy
    Properties:
      PolicyName: !Join ['',['lambdaExecutionPolicy',!FindInMap [Variables,Vid,value]]]
      PolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Action: 'dynamodb:Query'
            Resource: '*'
          - Effect: Allow
            Action: 'logs:*'
            Resource: 'arn:aws:logs:*:*:*'
          - Effect: Allow
            Action:
              - 's3:GetObject'
              - 's3:PutObject'
            Resource: 'arn:aws:s3:::*'
          - Effect: Allow
            Action:
              - 'logs:CreateLogGroup'
              - 'logs:CreateLogStream'
              - 'logs:PutLogEvents'
            Resource: '*'
          - Effect: Allow
            Action:
              - 'logs:CreateLogGroup'
              - 'logs:CreateLogStream'
              - 'logs:PutLogEvents'
            Resource: '*'
          - Effect: Allow
            Action: 'sns:Publish'
            Resource: !Ref mysubscription
      Roles: !Ref lambdaexecutionrole'

在执行 CFT 时

Answer 1

根据文档，Roles 的形式为：

  Roles: 
    - String

因此，在您的情况下，您应该：

Roles: 
  - !Ref lambdaexecutionrole

或

Roles: [!Ref lambdaexecutionrole]