Unable to create Role with aws iam create-role

2

I am getting the following error as below when command is ran:

$ aws iam create-role --role-name AmazonEKSNodeRole --assume-role-policy-document file://"iam-policy.json"

An error occurred (LimitExceeded) when calling the CreateRole operation: Cannot exceed quota for ACLSizePerRole: 2048

posta un anno fa5242 visualizzazioni
3 Risposte
4
Risposta accettata

As per the documentation, the default quota for "Role trust policy length" is 2048 characters. You can adjust this to a maximum of 4096 characters. To do so:

To request a quota increase, sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/. In the navigation pane, choose AWS services. On the navigation bar, choose the US East (N. Virginia) Region. Then search for IAM. Choose AWS Identity and Access Management (IAM), choose the Role trust policy length quota, and follow the directions to request a quota increase. For more information, see Requesting a Quota Increase in the Service Quotas User Guide.

profile picture
ESPERTO
bwhaley
con risposta un anno fa
profile picture
ESPERTO
verificato un mese fa
  • is this answer still correct? I can't see Identity and Access Management (IAM) on list of the service quota. I just see "AWS IAM Identity Center (successor to AWS Single Sign-On)" and then I have no "Role trust policy length" in there.

  • @rePost-User-3421899 It's still the correct answer. You need to access Service Quotas under the us-east-1 region to see IAM.

0

사용중인 리전이 다른리전이라해도, IAD(즉, us-east-1)으로 리전변경 하셔야만 AWS Identity and Access Management(IAM) 보이십니다.

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20으로 증가해주세요.

You should be changing the region. The service itself is only in IAD(i.e., us-east-1), since it's a global service (I presume)

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20

Thanks

profile picture
con risposta un anno fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande