mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-10-02 13:13:18 +00:00
28 lines
746 B
JSON
28 lines
746 B
JSON
|
{
|
||
|
|
"Version": "2012-10-17",
|
||
|
|
"Statement": [
|
||
|
|
{
|
||
|
|
"Sid": "RolesAnywhereAssumeFromStepCaLeaf",
|
||
|
|
"Effect": "Allow",
|
||
|
|
"Principal": {
|
||
|
|
"Service": "rolesanywhere.amazonaws.com"
|
||
|
|
},
|
||
|
|
"Action": [
|
||
|
|
"sts:AssumeRole",
|
||
|
|
"sts:TagSession",
|
||
|
|
"sts:SetSourceIdentity"
|
||
|
|
],
|
||
|
|
"Condition": {
|
||
|
|
"StringEquals": {
|
||
|
|
"aws:PrincipalTag/x509Subject/CN": "r720-aws-posture",
|
||
|
|
"aws:PrincipalTag/x509Issuer/CN": "Sea Haven Internal CA - R720 Roles Anywhere",
|
||
|
|
"aws:SourceAccount": "328440206208"
|
||
|
|
},
|
||
|
|
"ArnEquals": {
|
||
|
|
"aws:SourceArn": "arn:aws:rolesanywhere:us-east-1:328440206208:trust-anchor/REPLACE_WITH_TRUST_ANCHOR_ID"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|