Terraform how to to Set IAM Policy for EC2 Role with Inline Policies
I'm relatively new to this, so bear with me. I'm reviewing some code and I'm maintaining legacy code that I'm trying to configure I'm stuck on something that should probably be simple. I'm relatively new to this, so bear with me. I'm trying to set up an IAM role for my EC2 instances that includes an inline policy, but I keep running into issues when applying the Terraform configuration. Specifically, I'm using Terraform version 1.3.5 and I'm getting the following behavior: `behavior: Creating IAM Role: InvalidParameterValue: Inline policy size limit exceeded`. Here is a snippet of my configuration: ```hcl resource "aws_iam_role" "ec2_role" { name = "my_ec2_role" assume_role_policy = jsonencode({ Version = "2012-10-17" Statement = [ { Effect = "Allow" Principal = { Service = "ec2.amazonaws.com" } Action = "sts:AssumeRole" } ] }) } resource "aws_iam_policy" "ec2_policy" { name = "my_ec2_policy" description = "A policy for EC2 instances" policy = jsonencode({ Version = "2012-10-17" Statement = [ { Effect = "Allow" Action = ["s3:ListBucket", "s3:GetObject"], Resource = ["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"] }] }) } resource "aws_iam_role_policy_attachment" "ec2_policy_attachment" { policy_arn = aws_iam_policy.ec2_policy.arn role = aws_iam_role.ec2_role.name } ``` I think the question arises because my inline policy exceeds the size limit, but I need to find where I might have inadvertently created a policy that is too large. I've tried breaking the policy into smaller components, but the scenario continues. Also, I attempted to directly attach the policy instead of using an inline policy, which didn’t resolve the scenario either. Has anyone experienced this? What’s the best practice to manage inline policies without hitting size limits? What am I doing wrong? My development environment is Linux. Am I missing something obvious? I'm working on a web app that needs to handle this. What am I doing wrong? My team is using Hcl for this service. Thanks for any help you can provide! What would be the recommended way to handle this?