def create_cfn_admin_role()

in scripts/core_account_baseline.py [0:0]

• 13 lines of code
• 2 McCabe index (conditional complexity)

def create_cfn_admin_role(_iam_client):
    try:
        _iam_client.create_role(
            RoleName='CfnAdmin',
            AssumeRolePolicyDocument=json.dumps(assume_role_policy),
            Description='Enterprise Jumpstart Cloudformation role'
        )
        _iam_client.attach_role_policy(
            RoleName='CfnAdmin',
            PolicyArn='arn:aws:iam::aws:policy/AdministratorAccess'
        )
    except _iam_client.exceptions.EntityAlreadyExistsException:
        print("Role already exists in account - skipping")