def get_assume_role_policy_document()

in functions/source/c1cresources.py [0:0]

• 16 lines of code
• 1 McCabe index (conditional complexity)

def get_assume_role_policy_document(c1c_connector):
    assume_role_policy_document = {
        "Statement": [
            {
                "Action": "sts:AssumeRole",
                "Effect": "Allow",
                "Principal": {"AWS": CloudOneConformityAccountId},
                "Condition": {
                    "StringEquals": {"sts:ExternalId": c1c_connector.get_external_id()}
                },
                "Sid": "",
            }
        ],
        "Version": "2012-10-17",
    }
    return json.dumps(assume_role_policy_document)