in 03-no-iac/access_preview.py [0:0]
def _build_configuration(policy):
# IAM trust policies cannot have a Resource field in their policy statements
# the name chosen for the role does not matter
resource = f'arn:{partition}:iam::{account_id}:role/ArbitraryName'
return {
resource: {
'iamRole': {
'trustPolicy': json.dumps(policy)
}
}
}