serverspec_iam.yaml

---
AWSTemplateFormatVersion: '2010-09-09'
Description: 'Jenkins Role'

Resources:
  JenkinsRole:
    Type: AWS::IAM::Role
    Properties:
      Description: "Used for serverspec tests"
      RoleName: instance-serverspec
      Policies:
        - PolicyName: allow-serverspec
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: "Allow"
                Action:
                  - s3:ListBucket
                Resource:
                  - "arn:aws:s3:::serverspec"
              - Effect: "Allow"
                Action:
                  - s3:GetObject
                Resource:
                  - "arn:aws:s3:::serverspec/*"