AWS 上自定义策略可以分配的最大权限数是 20。如果超过该数量,将会返回以下错误信息:
An error occurred (MalformedPolicyDocument) when calling the PutRolePolicy operation: Number of allowed statements exceeded.
以下是分配最大权限数的示例代码:
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "", "Resource": "" }, { "Effect": "Deny", "Action": "s3:", "Resource": "arn:aws-cn:s3:::mybucket/" } ] }