What should the Principal be when creating an IAM

[adamvietnam]

Hi Guys,

I'm really enjoying artillery and am now looking to use AWS Lamba for distributed testing.

Following the guide at: https://www.artillery.io/docs/load-testing-at-scale/aws-lambda

I can create the IAM Policy okay but I am stuck on creating the IAM Custom trust policy.

The default policy as generated by the wizard is:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "Statement1",
			"Effect": "Allow",
			"Principal": {},
			"Action": "sts:AssumeRole"
		}
	]
}

However clicking through to complete the AWS wizard as per the docs gives the error:

Missing required field "Principal" cannot be empty

Any clues to what I should be setting "Principal" to?

[LiamJBerridge]

Hey @adamvietnam

you can set it to a service like this

{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "lambda.amazonaws.com"
},
"Action": "sts:AssumeRole"
}
]
}

Hope this helps 🍻

[adamvietnam]

Brilliant! That works , thank you.

…

On Tue, 14 Nov 2023 at 22:26, Liam Berridge ***@***.***> wrote: Hey @adamvietnam <https://github.com/adamvietnam> you can set it to a service like this { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "lambda.amazonaws.com" }, "Action": "sts:AssumeRole" } ] } Hope this helps 🍻 — Reply to this email directly, view it on GitHub <#2292 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAIS7TCMBDADAX2JKUOQCUTYEPVZDAVCNFSM6AAAAAA7LP3NKWVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM3TKNZQGM4TM> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[davedbase]

It would be wonderful if this was added to the documentation. Specifically here: https://www.artillery.io/docs/load-testing-at-scale/aws-fargate#setting-up-the-iam-policy-and-role-from-aws. I was forced by the AWS UI to supply the Principal policy and stumbled on this issue which resolved it. Would be great to help users if it was detailed directly.

[hassy]

we're working on simplifying all of this! :) cc @InesNi