in cdk-resources/lib/cdk-resources-stack.ts [224:252]
createCodeBuildIamRole(roleName:string){
// To DO : Add Policy in the Role For Accing ECR Log Group ,EKS Cluster
const role=new iam.Role(this, 'Role', {
roleName: roleName,
assumedBy: new iam.ServicePrincipal("codebuild.amazonaws.com"),
});
role.addToPolicy(new iam.PolicyStatement({
actions: [
"ecr:*",
"eks:*",
"sts:*",
"codeartifact:*",
"codecommit:BatchGetCommits",
"codecommit:GitPull",
"codecommit:ListBranches",
"codeguru-reviewer:*",
"elasticloadbalancing:DescribeLoadBalancers",
"elasticloadbalancing:DescribeListeners",
"elasticloadbalancing:DescribeTargetGroups",
"elasticloadbalancing:DescribeTargetHealth",
"SNS:Publish"
],
resources: ["*"]
}))
return role;
}