AWS Lambda VMExport role”翻译为“AWS Lambda虚拟机导出角色”。

代码示例：

1. 创建AWS Lambda虚拟机导出角色

import boto3

iam = boto3.client('iam')

trust_policy = {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "vmie.amazonaws.com"
            },
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                    "sts:ExternalId": "VMImport"
                }
            }
        }
    ]
}

role_name = 'my-lambda-vmexport-role'

role = iam.create_role(RoleName=role_name, AssumeRolePolicyDocument=json.dumps(trust_policy))

print(role)

2. 给AWS Lambda函数授权使用虚拟机导出角色

import boto3

iam = boto3.client('iam')
lambda_ = boto3.client('lambda')

function_name = 'my-lambda-function'
role_name = 'my-lambda-vmexport-role'

response = iam.attach_role_policy(
    RoleName=role_name,
    PolicyArn='arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
)

response = lambda_.update_function_configuration(
    FunctionName=function_name,
    Role=role_name
)

print(response)