步骤 2：为您的实例角色配置 IAM 权限

Fluent Bit在 Amazon EC2 实例上运行，并使用实例角色向 Amazon S3 进行身份验证。默认情况下，此角色不包含 Amazon S3 权限，因此您必须创建并附加一项策略，授予向前缀写入日志、从ecs-logs/前缀读取配置以及列出存储桶的Fluent Bit权限。fluent-bit/

使用以下 JSON 创建 IAM 策略：

{
    "Version": "2012-10-17", 
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:AbortMultipartUpload",
                "s3:ListMultipartUploadParts"
            ],
            "Resource": "arn:aws:s3:::host-level-logs-bucket/ecs-logs/*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::host-level-logs-bucket/fluent-bit/*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": "arn:aws:s3:::host-level-logs-bucket"
        }
    ]
}