【以下的问题经过翻译处理】 我正在尝试从step function中启动一个备份作业,但是遇到了Backup.BackupException错误,并显示以下消息:
Insufficient privileges to perform this action. (Service: Backup, Status Code: 403, Request ID: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx)
我的状态非常简单($ .table是dynamoDB表的ARN):
"StartBackupJob": {
"Type": "Task",
"Parameters": {
"BackupVaultName": "my-vault",
"IamRoleArn": "arn:aws:iam::xxxxxxxxxxxx:role/aws-service-role/backup.amazonaws.com/AWSServiceRoleForBackup",
"ResourceArn": "$.table"
},
"Resource": "arn:aws:states:::aws-sdk:backup:startBackupJob",
"End": true
}
即使我使用step function的IAM角色具有完全权限,我也会得到此错误。此外,如果我assume此角色,并使用它从AWS CLI启动具有相同参数的备份作业,则会成功。
有什么想法我做错了吗?