AWS信任关系在哪里配置？

Question

我在 AWS 的 Web 界面上找不到 this setting：

您还需要编辑角色的信任关系以允许 帐户（即使相同）来担任该角色。

open the role that you want to assume in the console
click on the "Trust Relationships" tab
click on "Edit RelationShip"

可能有截图吗？我正在阅读AWS Command Line Interface User Guide 手册，但看不到在哪里配置信任关系。

thufir@doge:~$ 
thufir@doge:~$ cat .aws/config 
[default]
output = text
region = us-west-2



[profile thufir]
role_arn = arn:aws:iam::1234567890:user/thufir
source_profile = default

thufir@doge:~$ 
thufir@doge:~$ aws iam list-users
USERS   arn:aws:iam::1234567890:user/thufir 2017-01-02T10:09:01Z    /   ABCDEFGIJKL thufir
thufir@doge:~$ 
thufir@doge:~$ aws s3 ls --profile thufir

An error occurred (AccessDenied) when calling the AssumeRole operation: Roles may not be assumed by root accounts.
thufir@doge:~$ 
thufir@doge:~$ export AWS_DEFAULT_PROFILE=thufir
thufir@doge:~$ 
thufir@doge:~$ aws s3 ls --profile thufir

An error occurred (AccessDenied) when calling the AssumeRole operation: Roles may not be assumed by root accounts.
thufir@doge:~$ 

Answer 1

使用 AWS 控制台，访问 IAM roles，然后单击相关角色。完成此操作后，您将看到这样的页面，其中包含“信任关系”选项卡：