AwsIamAssumeRolePolicyDefaultArgs
interface AwsIamAssumeRolePolicyDefaultArgs {
path?: undefined;
servicePrincipal: IamAssumeRoleServicePrincipal;
variables?: undefined;
}Applies the standard least-privilege assume-role policy for one approved AWS service principal.
Example
CODE
import { iamAssumeRoleServicePrincipals } from '@jobcloud/pulumi-helpers';
const policy: AwsIamAssumeRolePolicyDefaultArgs = {
servicePrincipal: iamAssumeRoleServicePrincipals.codeBuild,
};Properties
path: undefined
servicePrincipal: IamAssumeRoleServicePrincipal
Approved AWS service principal selected from iamAssumeRoleServicePrincipals in @jobcloud/pulumi-helpers.
The component generates a fixed allow-only sts:AssumeRole policy for this principal; inline policy documents are not supported.