Function buildRoleTrustPolicy

packages/cli/src/commands/lambda/policies.ts:191–202

()

 * be a confusingly-overscoped runtime role no human should attach.
 */
export function buildRoleTrustPolicy(): TrustPolicyDocument {
  return {
    Version: "2012-10-17",
    Statement: [
      {
        Effect: "Allow",
        Principal: { Service: "cloudformation.amazonaws.com" },
        Action: "sts:AssumeRole",
      },
    ],
  };
}

export interface PoliciesArgs {
  verb: PoliciesVerb;