IamRole
A resource of the AWS provider, version 0.3.0, in its IAM group. Import it with:
import IamRole from "aws/iam"Example
resource IamRole example {
name = "example-value"
description = "example-value"
assumeRolePolicy = "example-value"
path = "example-value"
maxSessionDuration = 3.14
managedPolicyArns = "..."
inlinePolicies = "..."
tags = "..."
}Properties
Set by your code in the resource block. A required one must be set; any other you leave out takes the value under Default, if it has one.
| Name | Type | Default | Required | Description |
|---|---|---|---|---|
name | string | — | No | Name of the IAM role |
description | string | — | No | Description of the role |
assumeRolePolicy | string | — | No | The trust policy that grants an entity permission to assume the role (JSON) |
path | string | — | No | Path for the role (default: /) |
maxSessionDuration | number | — | No | Maximum session duration in seconds (3600-43200) |
managedPolicyArns | any[] | — | No | ARNs of AWS managed policies to attach |
inlinePolicies | object | — | No | Inline policies to embed in the role (name -> policy JSON) |
tags | object | — | No | Tags to apply to the role |
Set by AWS after the resource is created: your code can read them but not set them. An importable one identifies an existing resource.
| Name | Type | Importable | Description |
|---|---|---|---|
roleId | string | No | The stable and unique ID for the role |
arn | string | Yes | The Amazon Resource Name (ARN) of the role |
createDate | string | No | The date and time when the role was created |