# aws_iam_role_policy_attachment.assume-cross-account-dns[0] will be created
+ resource "aws_iam_role_policy_attachment" "assume-cross-account-dns" {
+ id = (known after apply)
+ policy_arn = "arn:aws:iam::REDACT:policy/assume-cross-account-dns"
+ role = "arn:aws:iam::REDACT:role/external-dns20230208222035255800000004"
}
error:
╷
│ Error: attaching policy arn:aws:iam::REDACTED:policy/assume-cross-account-dns to IAM Role arn:aws:iam::REDACTED:role/external-dns20230208222035255800000004: ValidationError: The specified value for roleName is invalid. It must contain only alphanumeric characters and/or the following: +=,.@_-
│ status code: 400, request id: acde7f70-a538-4e6b-8a1c-efc033185e2a
│
│ with aws_iam_role_policy_attachment.assume-cross-account-dns[0],
│ on eks.tf line 375, in resource "aws_iam_role_policy_attachment" "assume-cross-account-dns":
│ 375: resource "aws_iam_role_policy_attachment" "assume-cross-account-dns" {
│
Looking at the proposed role in the aws_iam_role_policy_attachment it looks like it matches the alphanumeric characters and/or the following: +=,.!_-
Any suggestions?