Unable to create Role with aws iam create-role

2

I am getting the following error as below when command is ran:

$ aws iam create-role --role-name AmazonEKSNodeRole --assume-role-policy-document file://"iam-policy.json"

An error occurred (LimitExceeded) when calling the CreateRole operation: Cannot exceed quota for ACLSizePerRole: 2048

질문됨 일 년 전5242회 조회
3개 답변
4
수락된 답변

As per the documentation, the default quota for "Role trust policy length" is 2048 characters. You can adjust this to a maximum of 4096 characters. To do so:

To request a quota increase, sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/. In the navigation pane, choose AWS services. On the navigation bar, choose the US East (N. Virginia) Region. Then search for IAM. Choose AWS Identity and Access Management (IAM), choose the Role trust policy length quota, and follow the directions to request a quota increase. For more information, see Requesting a Quota Increase in the Service Quotas User Guide.

profile picture
전문가
bwhaley
답변함 일 년 전
profile picture
전문가
검토됨 2달 전
  • is this answer still correct? I can't see Identity and Access Management (IAM) on list of the service quota. I just see "AWS IAM Identity Center (successor to AWS Single Sign-On)" and then I have no "Role trust policy length" in there.

  • @rePost-User-3421899 It's still the correct answer. You need to access Service Quotas under the us-east-1 region to see IAM.

0

사용중인 리전이 다른리전이라해도, IAD(즉, us-east-1)으로 리전변경 하셔야만 AWS Identity and Access Management(IAM) 보이십니다.

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20으로 증가해주세요.

You should be changing the region. The service itself is only in IAD(i.e., us-east-1), since it's a global service (I presume)

AWS Services > AWS Identity and Access Management(IAM) > Managed policies per role -> increase to Applied quota value 20

Thanks

profile picture
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠