Merge pull request #12 from theonestack/managed_iam_policies

adds support for managed polices
theonestack · Mar 2, 2020 · 6681507 · 6681507
2 parents cc5913f + 2d35c26
commit 6681507
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/bastion.cfndsl.rb b/bastion.cfndsl.rb
@@ -32,10 +32,13 @@
   iam_policies.each do |name,policy|
     policies << iam_policy_allow(name,policy['action'],policy['resource'] || '*')
   end if defined? iam_policies
+
+   managed_iam_policies = external_parameters.fetch(:managed_iam_policies, [])
 
   Role('Role') do
     AssumeRolePolicyDocument service_role_assume_policy(iam_services)
     Path '/'
+    ManagedPolicyArns managed_iam_policies if managed_iam_policies.any?
     Policies(policies)
     Metadata({
       cfn_nag: {