in aws/iam.go [25:52]
func CreateDeviceFleetRole(client IamClient, fleetName *string, roleName *string) *types.Role {
assumeRolePolicyDocument := `{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {"Service": "credentials.iot.amazonaws.com"},
"Action": ["sts:AssumeRole"]
},
{
"Effect": "Allow",
"Principal": {"Service": "sagemaker.amazonaws.com"},
"Action": ["sts:AssumeRole"]
}
]
}`
result, err := client.CreateRole(context.TODO(), &iam.CreateRoleInput{
AssumeRolePolicyDocument: &assumeRolePolicyDocument,
RoleName: roleName,
})
if err != nil {
log.Fatalf("Failed to create role with role name %s. Encountered Error %s\n", *roleName, err)
}
return result.Role
}