Unable to create Role with aws iam create-role

2

I am getting the following error as below when command is ran:

$ aws iam create-role --role-name AmazonEKSNodeRole --assume-role-policy-document file://"iam-policy.json"

An error occurred (LimitExceeded) when calling the CreateRole operation: Cannot exceed quota for ACLSizePerRole: 2048

gefragt vor einem Jahr5242 Aufrufe
3 Antworten
4
Akzeptierte Antwort

As per the documentation, the default quota for "Role trust policy length" is 2048 characters. You can adjust this to a maximum of 4096 characters. To do so:

To request a quota increase, sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/. In the navigation pane, choose AWS services. On the navigation bar, choose the US East (N. Virginia) Region. Then search for IAM. Choose AWS Identity and Access Management (IAM), choose the Role trust policy length quota, and follow the directions to request a quota increase. For more information, see Requesting a Quota Increase in the Service Quotas User Guide.

profile picture
EXPERTE
bwhaley
beantwortet vor einem Jahr
profile picture
EXPERTE
überprüft vor einem Monat
  • is this answer still correct? I can't see Identity and Access Management (IAM) on list of the service quota. I just see "AWS IAM Identity Center (successor to AWS Single Sign-On)" and then I have no "Role trust policy length" in there.

  • @rePost-User-3421899 It's still the correct answer. You need to access Service Quotas under the us-east-1 region to see IAM.

0

사용중인 리전이 다른리전이라해도, IAD(즉, us-east-1)으로 리전변경 하셔야만 AWS Identity and Access Management(IAM) 보이십니다.

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20으로 증가해주세요.

You should be changing the region. The service itself is only in IAD(i.e., us-east-1), since it's a global service (I presume)

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20

Thanks

profile picture
beantwortet vor einem Jahr

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen