Unable to create Role with aws iam create-role

2

I am getting the following error as below when command is ran:

$ aws iam create-role --role-name AmazonEKSNodeRole --assume-role-policy-document file://"iam-policy.json"

An error occurred (LimitExceeded) when calling the CreateRole operation: Cannot exceed quota for ACLSizePerRole: 2048

demandé il y a un an5242 vues
3 réponses
4
Réponse acceptée

As per the documentation, the default quota for "Role trust policy length" is 2048 characters. You can adjust this to a maximum of 4096 characters. To do so:

To request a quota increase, sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/. In the navigation pane, choose AWS services. On the navigation bar, choose the US East (N. Virginia) Region. Then search for IAM. Choose AWS Identity and Access Management (IAM), choose the Role trust policy length quota, and follow the directions to request a quota increase. For more information, see Requesting a Quota Increase in the Service Quotas User Guide.

profile picture
EXPERT
bwhaley
répondu il y a un an
profile picture
EXPERT
vérifié il y a un mois
  • is this answer still correct? I can't see Identity and Access Management (IAM) on list of the service quota. I just see "AWS IAM Identity Center (successor to AWS Single Sign-On)" and then I have no "Role trust policy length" in there.

  • @rePost-User-3421899 It's still the correct answer. You need to access Service Quotas under the us-east-1 region to see IAM.

0

사용중인 리전이 다른리전이라해도, IAD(즉, us-east-1)으로 리전변경 하셔야만 AWS Identity and Access Management(IAM) 보이십니다.

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20으로 증가해주세요.

You should be changing the region. The service itself is only in IAD(i.e., us-east-1), since it's a global service (I presume)

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20

Thanks

profile picture
répondu il y a un an

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions