我有一个用例在哪里。
我想从参数部分传递多个存储桶名称,并授予它们对资源中这些存储桶的只读访问权限。我能够在限制计数时实现,但在未定义计数时如何实现。
"Parameters": {
"S3Bucket": {
"Type": "CommaDelimitedList",
"Description": "Select Bucket Names to Associate with the policy"
},
"Resource": [{"Fn::Join": ["", ["arn:aws:s3:::","Fn::Select": ["0", {
"Ref": "S3Bucket"
}]]
}