[Solved] This trust policy snippet causes the role to be assumable by no one:{"Statement": [{"Effect": "Allow", "Principal": {}, "Action": "sts:AssumeRole"}]}What is the problem? | AWS

AWS - Identity and Access Management

This trust policy snippet causes the role to be assumable by no one:

{"Statement": [{"Effect": "Allow", "Principal": {}, "Action": "sts:AssumeRole"}]}

What is the problem?

AEmpty Principal means no trusted entities

BEffect should be "Deny"

CAction is incorrect

DStatement must be a string

Step-by-Step Solution

Solution:

Step 1: Analyze Principal content
Principal is empty, so no entity is trusted to assume the role.
Step 2: Check other fields
Effect "Allow" and Action "sts:AssumeRole" are correct, Statement is an array.
Final Answer:
Empty Principal means no trusted entities -> Option A
Quick Check:
Empty Principal = no one can assume role [OK]

Quick Trick: Principal must list trusted entities; empty means none [OK]

Common Mistakes:

MISTAKES

Master "Identity and Access Management" in AWS

9 interactive learning modes - each teaches the same concept differently

More AWS Quizzes

This trust policy snippet causes the role to be assumable by no one: