Terraform：错误：“策略”包含无效的 JSON：查找值开头的字符“]”无效

Question

我在尝试实施此政策时收到如下错误， 错误：错误：“policy”包含无效的 JSON：查找值开头的字符“]”无效

有人可以解释一下如何解决这个问题吗？

 policy = <<POLICY
{
    "Version": "2012-10-17",
    "Id": "Policy1704624583452",
    "Statement": [
        {
            "Sid": "Stmt1704622653819",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
            "arn:aws:s3:::jenkins-prj01-s3bucket/",
            "arn:aws:s3:::jenkins-prj01-s3bucket/*"
            ]},
        {
            "Sid": "PublicReadGetObject",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Effect": "Allow",
            "Resource": [
            "arn:aws:s3:::jenkins-prj01-s3bucket/",
            "arn:aws:s3:::jenkins-prj01-s3bucket/*"
          ]},
]}
  depends_on = [aws_s3_bucket_public_access_block.override_default_setting]
}
POLICY
}

希望消除此错误并在 S3 存储桶上实施该策略。

Answer 1

如果遇到问题，请使用 JSON 验证器。这是可以使用的有效 JSON：

{
    "Version": "2012-10-17",
    "Id": "Policy1704624583452",
    "Statement": [
        {
            "Sid": "Stmt1704622653819",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::jenkins-prj01-s3bucket/",
                "arn:aws:s3:::jenkins-prj01-s3bucket/*"
            ]
        },
        {
            "Sid": "PublicReadGetObject",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::jenkins-prj01-s3bucket/",
                "arn:aws:s3:::jenkins-prj01-s3bucket/*"
            ]
        }
    ]
}