Assume Role Policy

Author: BobJWalker

aws/infrastructure/main.tf

@@ -27,6 +27,20 @@ resource "aws_iam_role" "subscriber_lambda_role" {
   name  = var.lambda_role_name
   path  = "/service-role/"
 
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Sid    = ""
+        Principal = {
+          Service = "ec2.amazonaws.com"
+        }
+      },
+    ]
+  })
+
   inline_policy {
     name = "lambda_role_inline_policy"