in lambda-packages/role_handler/index.js [115:130]
AssumeRolePolicyDocument: getAssumeRolePolicy(
await getAccountId(),
await getIssuer(props.ClusterName),
props.Namespace,
props.ServiceAccount
),
RoleName: props.RoleName,
Description: props.Description,
MaxSessionDuration: props.MaxSessionDuration,
Path: props.Path,
PermissionsBoundary: props.PermissionsBoundary
// Tags: ...?
}).promise();
console.log('Waiting for IAM role creation to finalize...');
await iam.waitFor('roleExists', {