fix(aws-iam): Adding addPrincipalsToAssumedBy() to allow adding more …

…principals to TrustRelationship of Role to overcome limitation of grantAssumeRole() (aws#22550)
stm29 · Aug 17, 2024 · 7e0658e · 7e0658e
1 parent 751a922
commit 7e0658e
Show file tree

Hide file tree

Showing 11 changed files with 227 additions and 39 deletions.
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/cdk.out b/packages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/cdk.out
diff --git a/...ing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ-iam-role-1.assets.json b/...ing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ-iam-role-1.assets.json
diff --git a/...g/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ-iam-role-1.template.json b/...g/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ-iam-role-1.template.json
@@ -117,6 +117,42 @@
      "Version": "2012-10-17"
     }
    }
+  },
+  "TestRoleExtend463E7146": {
+   "Type": "AWS::IAM::Role",
+   "Properties": {
+    "AssumeRolePolicyDocument": {
+     "Statement": [
+      {
+       "Action": "sts:AssumeRole",
+       "Effect": "Allow",
+       "Principal": {
+        "AWS": {
+         "Fn::Join": [
+          "",
+          [
+           "arn:",
+           {
+            "Ref": "AWS::Partition"
+           },
+           ":iam::",
+           {
+            "Ref": "AWS::AccountId"
+           },
+           ":root"
+          ]
+         ]
+        },
+        "Service": [
+         "ec2.amazonaws.com",
+         "sqs.amazonaws.com"
+        ]
+       }
+      }
+     ],
+     "Version": "2012-10-17"
+    }
+   }
   }
  },
  "Parameters": {

diff --git a/...ages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ.json b/...ages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/integ.json
diff --git a/...s-iam/test/integ.role.js.snapshot/integiamroleDefaultTestDeployAssert48737E31.assets.json b/...s-iam/test/integ.role.js.snapshot/integiamroleDefaultTestDeployAssert48737E31.assets.json
diff --git a/...s/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/manifest.json b/...s/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/manifest.json
diff --git a/packages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/tree.json b/packages/@aws-cdk-testing/framework-integ/test/aws-iam/test/integ.role.js.snapshot/tree.json