AWS create-policy MalformedPolicyDocument

Question

Hello,  
  
I did not find the solution here so I need to ask you for some help. I am trying to create a new simple aws policy (cli) with powershell and I have the error:  
  
_An error occurred (MalformedPolicyDocument) when calling the CreatePolicy operation: Syntax errors in policy._  
  
This is the command I use:  
  
_aws iam create-policy --policy-name TEST-POLICY --policy-document file://policy.json_  
  
And this is the policy.json file:  
  
_{_  
    _"Version": "2012-10-17",_  
    _"Statement": \[_  
        _{_  
            _"Sid": "VisualEditor0",_  
            _"Effect": "Allow",_  
            _"Action": \[_  
                _"iam:GetUser",_  
                _"iam:GetGroup"_  
            _],_  
            _"Resource": \[_  
                _"arn:aws:iam::(arn id):user/(arn id)",_  
                _"arn:aws:iam::(arn id):group/(arn id)"_  
            _]_  
        _}_  
    _]_  
_}_  
  
It is strange because when I use the AWS website JSON editor it works fine. But when I try it on my windows pc does not.  
Maybe there is something missing on the cmdlet?  
  
PS: I wrote (arn id) but there is an ID in the real file

Answer

Solved. It was because the encoding UTF-8-BOM. It must be UTF-8

Answer

In general use CloudTrail to troubleshoot the error. Refer to this guide : https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-malformed-policy-errors/

AWS create-policy MalformedPolicyDocument

Relevant content