Port sts_assume_role to boto3 (#32569)

* Ported sts_assume_role to boto3 * Added integration tests
2025-07-22 12:50:22 -07:00 · 2018-01-22 23:46:08 +01:00 · 2018-01-22 23:46:08 +01:00 · 5fa29201a7
commit 5fa29201a7
parent ffe0ddea96
6 changed files with 500 additions and 36 deletions
--- a/hacking/aws_config/testing_policies/sts-policy.json
+++ b/hacking/aws_config/testing_policies/sts-policy.json
@ -0,0 +1,23 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "AllowSTSAnsibleTests",
+            "Action": [
+                "iam:Get*",
+                "iam:List*",
+                "iam:CreateRole",
+                "iam:DeleteRole",
+                "iam:DetachRolePolicy",
+                "sts:AssumeRole",
+                "iam:AttachRolePolicy",
+                "iam:CreateInstanceProfile"
+            ],
+            "Effect": "Allow",
+            "Resource": [
+                "arn:aws:iam::{{aws_account}}:role/ansible-test-sts-*",
+                "arn:aws:iam::{{aws_account}}:instance-profile/ansible-test-sts-*"
+            ]
+        }
+    ]
+}