templates/nested/ad-ca.template.yaml [633:649]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      Policies:
        - PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Action:
                  - s3:GetObject
                  - s3:PutObject
                  - s3:ListBucket
                  - s3:GetEncryptionConfiguration
                Resource:
                  - !Sub "arn:${AWS::Partition}:s3:::${CRLS3BucketName}"
                  - !Sub "arn:${AWS::Partition}:s3:::${CRLS3BucketName}/*"
                Effect: Allow
              - Action:
                  - kms:Decrypt
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/nested/ad-ca.template.yaml [723:739]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: AWS::IAM::Role
    Properties:
      Policies:
        - PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Action:
                  - s3:GetObject
                  - s3:PutObject
                  - s3:ListBucket
                  - s3:GetEncryptionConfiguration
                Resource:
                  - !Sub "arn:${AWS::Partition}:s3:::${CRLS3BucketName}"
                  - !Sub "arn:${AWS::Partition}:s3:::${CRLS3BucketName}/*"
                Effect: Allow
              - Action:
                  - kms:Decrypt
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



