cfn/mozart.yml [1048:1075]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: "AWS::IAM::Role"
    Properties:
      AssumeRolePolicyDocument: !Sub
          - |
            {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Principal": {
                    "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/${ClusterOIDCPath}"
                  },
                  "Action": "sts:AssumeRoleWithWebIdentity",
                  "Condition": {
                    "StringEquals": {
                      "${ClusterOIDCPath}:aud": "sts.amazonaws.com"
                    }
                  }
                }
              ]
            }   
          - ClusterOIDCPath: !Join 
            - ''
            - - 'oidc.eks.'
              - !Ref 'AWS::Region'
              - '.amazonaws.com/id/'
              - !Select [0, !Split ['.', !Select [1, !Split ['//', !GetAtt EksControlPlane.Endpoint]]]]     
      Policies:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



cfn/mozart.yml [1122:1149]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Type: "AWS::IAM::Role"
    Properties:
      AssumeRolePolicyDocument: !Sub
          - |
            {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Principal": {
                    "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/${ClusterOIDCPath}"
                  },
                  "Action": "sts:AssumeRoleWithWebIdentity",
                  "Condition": {
                    "StringEquals": {
                      "${ClusterOIDCPath}:aud": "sts.amazonaws.com"
                    }
                  }
                }
              ]
            }   
          - ClusterOIDCPath: !Join 
            - ''
            - - 'oidc.eks.'
              - !Ref 'AWS::Region'
              - '.amazonaws.com/id/'
              - !Select [0, !Split ['.', !Select [1, !Split ['//', !GetAtt EksControlPlane.Endpoint]]]]     
      Policies:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



