[Solved] You wrote this trust policy for an IAM role:{"Statement": [{"Effect": "Allow", "Principal": "ec2.amazonaws.com", "Action": "sts:AssumeRole"}]}Why does this policy cause an error? | AWS

AWS - Identity and Access Management

You wrote this trust policy for an IAM role:

{"Statement": [{"Effect": "Allow", "Principal": "ec2.amazonaws.com", "Action": "sts:AssumeRole"}]}

Why does this policy cause an error?

A"Action" is misspelled

B"Principal" must be an object, not a string

C"Effect" cannot be "Allow"

D"Statement" must be a string

Step-by-Step Solution

Solution:

Step 1: Check Principal format
Principal must be an object specifying the service, e.g., {"Service": "ec2.amazonaws.com"}, not a plain string.
Step 2: Validate other keys
Action and Effect are correct, Statement is an array as required.
Final Answer:
"Principal" must be an object, not a string -> Option B
Quick Check:
Principal format error = must be object [OK]

Quick Trick: Principal must be an object with Service or AWS key [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

You wrote this trust policy for an IAM role: