def _update_trust_policy()

in migration/bring-your-own-role/byor.py [0:0]

• 12 lines of code
• 5 McCabe index (conditional complexity)

def _update_trust_policy(role_name, new_trust_policy, iam_client, execute_flag):
    if execute_flag:
        print(f"Updating trust policy for role: {role_name}")
        iam_client.update_assume_role_policy(
            RoleName=role_name,
            PolicyDocument=str(new_trust_policy).replace("'", '"')
        )
        print(f"Trust policy updated successfully for role: `{role_name}`\n")
    else:
        print(f"New trust policy for role `{role_name}` would be:")
        pprint(new_trust_policy)
        print(f"Trust policy update skipped for role: `{role_name}`, set --execute flag to True to do the actual update.\n")