in lib/ct_notifications_role-stack.ts [11:32]
constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
super(scope, id, props);
const notificationRole = new Role(this, 'ctNotificationRole',{
assumedBy: new ServicePrincipal('lambda.amazonaws.com'),
roleName: 'aws-CT-CustomChimeNotificationRole'
})
notificationRole.addManagedPolicy(
ManagedPolicy.fromManagedPolicyArn(this,'AWSLambdaBasicExecutionRole',
'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole')
)
notificationRole.addManagedPolicy(
ManagedPolicy.fromManagedPolicyArn(this,'AWSOrganizationsReadOnlyAccess',
'arn:aws:iam::aws:policy/AWSOrganizationsReadOnlyAccess')
)
new CfnOutput(this,"roleArn",{
value: notificationRole.roleArn
})
}