我正在开发一个我需要安排任务的应用程序,所以我正在使用AWS Lambda . 但是,预定的时间是动态的,因为它取决于用户请求,不能使用AWS控制台进行调度,所以我使用AWS Javascript SDK来安排它 . 这是流程:
-
创建CloudWatch规则(这是成功的,我可以看到在控制台中创建的规则
-
添加lambda策略的权限,以便cloudwatch事件可以调用它(Lambda函数代码对于所有请求都是相同的,所以我在AWS Console中创建了lambda函数而不是使用SDK)
-
将目标添加到步骤1中创建的规则(此步骤失败) . 我得到的错误是 RoleArn is not supported for target arn:aws:lambda:eu-west-1:629429065286:function:prebook.
下面是我写的Node.js代码
schedule_aws_lambda: function(booking_id, cronTimeIST, callback){
var event = new AWS.CloudWatchEvents({
accessKeyId: accessKeyId,
secretAccessKey: secretAccessKey,
region: 'eu-west-1'
});
var lambda = new AWS.Lambda({
accessKeyId: accessKeyId,
secretAccessKey: secretAccessKey,
region: 'eu-west-1'
});
var year = cronTimeIST.utc().year();
var month = cronTimeIST.utc().month() + 1;
var date = cronTimeIST.utc().date();
var hour = cronTimeIST.utc().hour();
var minute = cronTimeIST.utc().minute();
var cronExpression = "cron(" + minute + " "+ hour + " " + date + " " + month + " ? " + year +")";
var hour_minute = cronTimeIST.format("HH_mm");
var ruleParams = {
Name: 'brodcast_' + booking_id + '_' + hour_minute,
Description: 'prebook brodcast for ' + booking_id + '_' + hour_minute,
ScheduleExpression: cronExpression,
RoleArn: 'arn:aws:iam::629429065286:role/service-role/prebook_lambda_role',
State: 'ENABLED',
};
event.putRule(ruleParams).promise()
.then(data => {
var lambdaPermission = {
FunctionName: 'arn:aws:lambda:eu-west-1:629429065286:function:prebook',
StatementId: 'brodcast_' + booking_id + '_' + hour_minute,
Action: 'lambda:*',
Principal: 'events.amazonaws.com',
};
return lambda.addPermission(lambdaPermission).promise();
})
.then(data => {
var targetParams = {
Rule: ruleParams.Name,
Targets: [
{
Id: 'default',
Arn: 'arn:aws:lambda:eu-west-1:629429065286:function:prebook',
RoleArn: ruleParams.RoleArn,
Input: JSON.stringify({booking_id: booking_id})
}
]
};
return event.putTargets(targetParams).promise();
})
.then(data => {
callback(null, data);
})
.catch(err => {
callback(err)
});
}
我知道它必须对角色做一些事情并没有找出确切的原因,我已经为角色提供了以下访问权限
这是政策文件
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "lambda.amazonaws.com"
},
"Action": "sts:AssumeRole"
},
{
"Effect": "Allow",
"Principal": {
"Service": "events.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}
基本上,我想在lambda函数中附加许多触发器(触发时间对我而言,这取决于用户请求),但是,lambda函数代码对所有人来说都是相同的 .
1 回答
尝试删除RoleArn属性 . 如果要向Lambda函数添加权限以允许CloudWatch事件调用它,则不需要它 .
在功能策略中,请确保添加事件的SourceArn .