Getting "Invalid json" error when creating iam-role using aws cli

Question

I'm getting an error when trying to create a new role using aws cli.

Here is the error message.

An error occurred (MalformedPolicyDocument) when calling the CreateRole operation: This policy contains invalid Json

In other to crate a role, I run following command.

aws iam create-role --path /role-service/ --role-name Test-Role --assume-role-policy-document policy.json 

and the policy.json is

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "cognito-idp.amazonaws.com"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "d611c8fd-0fd1-469a-a5ea-b02186042023"
        }
      }
    }
  ]
}

Answer 1

You should be using file:// as explained in:

• Loading AWS CLI parameters from a file

Therefore, you can try the following if policy.json in your current working directory:

aws iam create-role --path /role-service/ --role-name Test-Role --assume-role-policy-document file://policy.json