labs/preventive-control/products/asc/sc-asc-products-role.yml [16:44]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
AWSTemplateFormatVersion: 2010-09-09
Description: Create Service Catalog Product Role
Parameters:
  ProductRoleName:
    Description: Product IAM Role Name
    Type: String
  ProductPolicyName:
    Description: Product IAM Role Name
    Type: String

Resources:
  ProductRole:
    Type: 'AWS::IAM::Role'
    Properties:
      RoleName: !Ref ProductRoleName
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - servicecatalog.amazonaws.com
            Action:
              - 'sts:AssumeRole'
      Path: /
      ManagedPolicyArns:
        - !Sub 'arn:aws:iam::${AWS::AccountId}:policy/${ProductPolicyName}'
      Policies:
        -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



labs/preventive-control/products/dmsinstance/sc-dmsinstance-products-role.yml [16:44]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
AWSTemplateFormatVersion: 2010-09-09
Description: Create Service Catalog Product Role
Parameters:
  ProductRoleName:
    Description: Product IAM Role Name
    Type: String
  ProductPolicyName:
    Description: Product IAM Role Name
    Type: String

Resources:
  ProductRole:
    Type: 'AWS::IAM::Role'
    Properties:
      RoleName: !Ref ProductRoleName
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - servicecatalog.amazonaws.com
            Action:
              - 'sts:AssumeRole'
      Path: /
      ManagedPolicyArns:
        - !Sub 'arn:aws:iam::${AWS::AccountId}:policy/${ProductPolicyName}'
      Policies:
        -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



