Getting "Invalid json" error when creating iam-role using aws cli

Question

I'm getting an error when trying to create a new role using aws cli.

Here is the error message.

An error occurred (MalformedPolicyDocument) when calling the CreateRole operation: This policy contains invalid Json

In other to crate a role, I run following command.

aws iam create-role --path /role-service/ --role-name Test-Role --assume-role-policy-document policy.json

and the policy.json is

{ "Version": "2012-10-17", "Statement": [ { "Sid": "", "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole", "Condition": { "StringEquals": { "sts:ExternalId": "d611c8fd-0fd1-469a-a5ea-b02186042023" } } } ] }

How did it go? The issue still persist?

Marcin
– Marcin

2021-06-13 20:44:38 +00:00
Commented Jun 13, 2021 at 20:44 — Marcin
– Marcin, Commented Jun 13, 2021 at 20:44

Marcin · Accepted Answer · 2020-10-02 07:23:23Z

4

You should be using file:// as explained in:

Loading AWS CLI parameters from a file

Therefore, you can try the following if policy.json in your current working directory:

aws iam create-role --path /role-service/ --role-name Test-Role --assume-role-policy-document file://policy.json

answered Oct 2, 2020 at 7:23

Marcin

241k16 gold badges315 silver badges368 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Venus713 Over a year ago

But, if the policy.json file is in specific directory in current directory, how to point the path?

Marcin Over a year ago

@Venus713 You can provide full path to it. For example if its in /tmp/ you can file:///tmp/policy.json. The link in the answer has more examples.

Venus713 Over a year ago

aws iam create-role --path /service-role/ --role-name test-role --assume-role-policy-document file:///src/actions/export/server/role-trust-policy.json

I run the command above and got following error.

Error parsing parameter '--assume-role-policy-document': Unable to load paramfile file:///src/actions/export/server/role-trust-policy.json: [Errno 2] No such file or directory: '/src/actions/export/server/role-trust-policy.json'

Marcin Over a year ago

@Venus713 probably you have wrong path. If /src/actions/export/server/role-trust-policy.json actually exists, the command is correct.

Collectives™ on Stack Overflow

Getting "Invalid json" error when creating iam-role using aws cli

1 Answer 1

4 Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Related