如何将列表传递给 powershell 中的 aws CDK bootstrap `--cloudformation-execution-policies` 参数

Question

目标

要在 powershell 中使用 AWS CDK bootstrap 命令，请使用带有列表的 --cloudformation-execution-policies 参数。

documentation 没有 OS 的具体例子。

测试

• 传递单个字符串效果很好，例如：--cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
• 以各种方式传递字符串列表不起作用
• --cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess","arn:aws:iam::aws:policy/AWSCodeDeployFullAccess"
• --cloudformation-execution-policies "arn:aws:iam::aws:policy/AWSLambda_FullAccess" "arn:aws:iam::aws:policy/AWSCodeDeployFullAccess"
• --cloudformation-execution-policies @("arn:aws:iam::aws:policy/AWSLambda_FullAccess","arn:aws:iam::aws:policy/AWSCodeDeployFullAccess")
• --cloudformation-execution-policies @('arn:aws:iam::aws:policy/AWSLambda_FullAccess','arn:aws:iam::aws:policy/AWSCodeDeployFullAccess')

他们都失败了：

 ARN arn:aws:iam::aws:policy/AWSLambda_FullAccess arn:aws:iam::aws:policy/AWSCodeDeployFullAccess is not valid.
Status Code: 400; Error Code: InvalidInput;

环境

• OS:
• Python: Python 3.9.5
• AWS CLI: aws-cli/2.2.5 Python/3.8.8 Windows/10 exe/AMD64 prompt/off
• 节点：v13.14.0
• CDK：1.116.0（构建 d04661d）

问题

CDK 工具在 powershell 中解析列表的正确方式是什么？

Answer 1

参考资料

• CDK模板CloudFormationExecutionPolicies参数info link
• CFN模板参数CommaDelimitedList类型info link

回答

关键是CDK使用CFN参数传递值，而且是CommaDelimitedList，传递方式是单个字符串，而不是列表

即：--cloudformation-execution-policies 'arn:aws:iam::aws:policy/AWSLambda_FullAccess,arn:aws:iam::aws:policy/AWSCodeDeployFullAccess'