IAM error: Resource vendor must be fully qualified and cannot contain regexes

Updating an IAM managed policy gave this error message:

"resource vendor must be fully qualified and cannot contain regexes"

It was the result of a silly typo:

Action: "Deny",
Resources: [
  "ec2:*:*:*
]

Missing the arn:aws for the resource item, the fix:

Action: "Deny",
Resources: [
  "arn:aws:ec2:*:*:*
]

Comments

comments powered by Disqus