Created
September 4, 2019 16:37
-
-
Save josjaf/69157e74485e15a707b14d407962ccda to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
from aws_cdk import ( | |
aws_iam as aws_iam, | |
aws_s3 as aws_s3, | |
aws_ecr, | |
aws_ec2, | |
core, | |
) | |
class Compute(core.Stack): | |
def __init__(self, app: core.App, id: str, props, **kwargs) -> None: | |
super().__init__(app, id, **kwargs) | |
# creating a role manually because the instance class does not exist | |
ec2_role = aws_iam.Role( | |
self, "RoleB", | |
assumed_by=aws_iam.CompositePrincipal( | |
# aws_iam.Role(), | |
#aws_iam.PrincipalBase(props.ec2_role.role_arn), | |
aws_iam.ArnPrincipal(core.PhysicalName.GENERATE_IF_NEEDED(props.ec2_role)), | |
aws_iam.ArnPrincipal(props.ec2_role.role_arn), | |
aws_iam.ServicePrincipal('ec2.amazonaws.com'), | |
aws_iam.ServicePrincipal('ssm.amazonaws.com'), | |
aws_iam.AccountRootPrincipal(), | |
), | |
max_session_duration=core.Duration.hours(1), | |
managed_policies=[aws_iam.ManagedPolicy.from_aws_managed_policy_name('AmazonSSMManagedInstanceCore')], | |
# | |
) | |
@property | |
def outputs(self): | |
props = self.output_props | |
return props |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment