如何在powershell中将列表传递给aws CDK引导程序`--cloudformation execution-policies`参数

Question

目标

若要在powershell中使用AWS bootstrap命令，请使用带有列表的--cloudformation-execution-policies参数。

文档没有关于开放源码软件的具体示例。

测试

• 传递单个字符串很好，例如：--cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
• 以各种方式传递字符串列表不起作用。
• --cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess","arn:aws:iam::aws:policy/AWSCodeDeployFullAccess"
• --cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess" "arn:aws:iam::aws:policy/AWSCodeDeployFullAccess"
• --cloudformation-execution-policies @("arn:aws:iam::aws:policy/AWSLambda_FullAccess","arn:aws:iam::aws:policy/AWSCodeDeployFullAccess")
• --cloudformation-execution-policies @('arn:aws:iam::aws:policy/AWSLambda_FullAccess','arn:aws:iam::aws:policy/AWSCodeDeployFullAccess')

他们都失败了：

 ARN arn:aws:iam::aws:policy/AWSLambda_FullAccess arn:aws:iam::aws:policy/AWSCodeDeployFullAccess is not valid.
Status Code: 400; Error Code: InvalidInput;

环境

• 操作系统：
• Python: Python3.9.5
• AWS CLI: aws/2.2.5 Python/3.8.8 Windows/10 exe/aws 64提示/关闭
• 节点: v13.14.0
• CDK: 1.116.0 (构建d04661d)

问题

在powershell中，CDK工具解析列表的正确方式是什么？

Answer 1

参考文献

• CDK模板CloudFormationExecutionPolicies参数信息链接
• CFN模板参数CommaDelimitedList型信息链接

回答

关键是CDK使用CFN参数传递值，作为一个CommaDelimitedList，传递它的方式是一个字符串，而不是一个列表。

ie：--cloudformation-execution-policies 'arn:aws:iam::aws:policy/AWSLambda_FullAccess,arn:aws:iam::aws:policy/AWSCodeDeployFullAccess'