I’m try to create a service role for AWS CodeBuild.
I can create a role like this:
JavaScript
x
8
1
from aws_cdk import aws_iam as iam
2
3
role = iam.Role(
4
self, 'CodebuildServiceRole',
5
assumed_by=iam.ServicePrincipal('codebuild.amazonaws.com'),
6
max_session_duration=cdk.Duration.hours(1),
7
)
8
Now I need to attach the Amazon-provided AWSCodeBuildAdminAccess
policy to the role. How can I do this using the CDK?
Advertisement
Answer
You can get access to the policy like this:
JavaScript
1
2
1
AWSCodeBuildAdminAccess = iam.ManagedPolicy.from_aws_managed_policy_name('AWSCodeBuildAdminAccess')
2
And attach it to your role like this:
JavaScript
1
2
1
role.add_managed_policy(AWSCodeBuildAdminAccess)
2