role resource

Description

RoleResource is an IAM role: a named identity, governed by a trust policy, that principals assume to receive temporary credentials. The fields mirror the IAM CreateRole API. The role name and path fix the role's identity and ARN, so a change to either replaces the role; the trust policy, description, session limit, permissions boundary, and tags all change in place.

Source: internal/service/iam/role_rsrc.go:27

Example usage:

imports: {
  aws-iam: 'github.com/cloudboss/unobin-library-aws//service/iam'
}

resources: {
  example: aws-iam.role {
    # Set input fields here.
  }
}

Inputs

role-name

string

required

assume-role-policy-document

string

required

path

optional(string)

description

optional(string)

max-session-duration

optional(integer)

permissions-boundary

optional(string)

tags

optional(map(string))

Input Constraints

Max session duration rules

max-session-duration must be between 3600 and 43200 seconds.

Rule logic

When

input.max-session-duration != null

Require

input.max-session-duration >= 3600
&& input.max-session-duration <= 43200

Outputs

arn

string

role-id

string

create-date

string