调用AssociateAddress- AWS传输系列时出错

Question

我已尝试通过控制台在VPC公有子网中创建AWS传输系列。它失败了，并显示以下错误“调用AssociateAddress时出错:您无权执行此操作”。已对消息进行解码，以发现缺少EC2的权限:AssociateAddress

已将以下策略添加到角色中。在创建服务器时，错误仍然存在。你能帮帮我吗

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "ec2:AssociateAddress",
            "Resource": "arn:aws:ec2:us-east-1:111111:elastic-ip/*",
            "Effect": "Allow"
        }
    ]
}

Answer 1

AssociateAddress不仅适用于elastic-ip。您应该尝试使用：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "ec2:AssociateAddress",
            "Resource": [
               "arn:aws:ec2:us-east-1:111111:elastic-ip/*",
               "arn:aws:ec2:us-east-1:111111:instance/*",
               "arn:aws:ec2:us-east-1:111111:network-interface/*",
             ],
            "Effect": "Allow"
        }
    ]
}