createCodeBuildIamRole()

in cdk-resources/lib/cdk-resources-stack.ts [224:252]


  createCodeBuildIamRole(roleName:string){
  // To DO : Add Policy in the Role For Accing ECR Log Group ,EKS Cluster 
  const role=new iam.Role(this, 'Role', {
      roleName: roleName,
      assumedBy: new iam.ServicePrincipal("codebuild.amazonaws.com"),
    
    });

    
    role.addToPolicy(new iam.PolicyStatement({
      actions: [
        "ecr:*",
        "eks:*",
        "sts:*",
        "codeartifact:*",
        "codecommit:BatchGetCommits",
        "codecommit:GitPull",
        "codecommit:ListBranches",
        "codeguru-reviewer:*",
        "elasticloadbalancing:DescribeLoadBalancers",
        "elasticloadbalancing:DescribeListeners",
        "elasticloadbalancing:DescribeTargetGroups",
        "elasticloadbalancing:DescribeTargetHealth",
        "SNS:Publish"
      ],
      resources: ["*"]
    }))
    return role;
  }