源文件

aws/iam/deploy-role.yaml

离线配置。未部署到任何云账号。

# SECONDARY — AWS parallel; GCP is the primary narrative of this demo.
kind: AwsIamFragment
secondary: true
role_name: insights-api-deploy
purpose: deploy
description: Deploy role. May update only function insights-api-secondary.
bindings:
  - member: arn:aws:iam::000000000000:role/insights-api-deploy
    role: lambda:UpdateFunctionCode
    resource: arn:aws:lambda:us-east-1:000000000000:function:insights-api-secondary
    purpose: deploy
    sa: insights-api-deploy
  - member: arn:aws:iam::000000000000:role/insights-api-deploy
    role: lambda:GetFunction
    resource: arn:aws:lambda:us-east-1:000000000000:function:insights-api-secondary
    purpose: deploy
    sa: insights-api-deploy