Skip to main content
DevOps

Return to Question

Improve formatting a bit
Source Link
edit approved Dec 17, 2020 at 18:18
Yuri
edit approved Dec 17, 2020 at 18:18
Yuri
  • 105
  • 3

I'm confused as to what the purpose of AssumeRolePolicyDocumentAssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It

It seems like AssumeRolePolicyDocumentAssumeRolePolicyDocument is that parent name but somehow there's more to it. What

What is this doing?

       "AssumeRolePolicyDocument": {
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Principal": {
                            "Service": [
                                "lambda["lambda.amazonaws.com"
                            ]com"]
                        },
                        "Action": [
                            "sts["sts:AssumeRole"
                        ]AssumeRole"]
                    }
                ]
            },

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it. What is this doing?

       "AssumeRolePolicyDocument": {
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Principal": {
                            "Service": [
                                "lambda.amazonaws.com"
                            ]
                        },
                        "Action": [
                            "sts:AssumeRole"
                        ]
                    }
                ]
            },

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to.

It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it.

What is this doing?

"AssumeRolePolicyDocument": {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": ["lambda.amazonaws.com"]
            },
            "Action": ["sts:AssumeRole"]
        }
    ]
}
added 631 characters in body
Source Link
Dr. Chocolate
Dr. Chocolate
  • 605
  • 1
  • 6
  • 9

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it. What is this doing?

       "AssumeRolePolicyDocument": {
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Principal": {
                            "Service": [
                                "lambda.amazonaws.com"
                            ]
                        },
                        "Action": [
                            "sts:AssumeRole"
                        ]
                    }
                ]
            },

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it.

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it. What is this doing?

       "AssumeRolePolicyDocument": {
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Principal": {
                            "Service": [
                                "lambda.amazonaws.com"
                            ]
                        },
                        "Action": [
                            "sts:AssumeRole"
                        ]
                    }
                ]
            },
Source Link
Dr. Chocolate
Dr. Chocolate
  • 605
  • 1
  • 6
  • 9

What is the purpose of AssumeRolePolicyDocument in IAM?

I'm confused as to what the purpose of AssumeRolePolicyDocument is.
It seems like to create a role all you need is a parent name that you can attach policies to. It seems like AssumeRolePolicyDocument is that parent name but somehow there's more to it.