使用Terraform创建AWS VPC遇权限不足，需补充哪些权限？

DevOps 小满

2026-7-26

解决Terraform创建VPC权限不足的问题

你的IAM策略缺少两个关键权限，导致创建VPC失败：

ec2:CreateTags：Terraform在创建VPC后会自动为资源添加标签，需要该权限完成此操作
ec2:ModifyVpcAttribute：默认情况下，Terraform会配置VPC的DNS支持（enable_dns_support）和DNS主机名（enable_dns_hostnames）属性，需要该权限修改VPC属性

更新后的IAM策略

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:DeleteSubnet",
                "ec2:DescribeAvailabilityZones",
                "ec2:DescribeVpcs",
                "ec2:CreateVpc",
                "ec2:DeleteVpc",
                "ec2:CreateSubnet",
                "ec2:DescribeSubnets",
                "ec2:CreateTags",
                "ec2:ModifyVpcAttribute"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": "s3:ListBucket",
            "Resource": "arn:aws:s3:::bucket"
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::bucket/prj_terraform_file"
        }
    ]
}