serverless-blue-green-deployments/lib/CfTemplateGenerators/Iam.js

A Serverless plugin to implement blue/green deployment of Lambda functions

function buildCodeDeployRole (codeDeployRolePermissionsBoundaryArn) {
  const iamRoleCodeDeploy = {
    Type: 'AWS::IAM::Role',
    Properties: {
      ManagedPolicyArns: [
        'arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambda',
        'arn:aws:iam::aws:policy/AWSLambda_FullAccess'
      ],
      AssumeRolePolicyDocument: {
        Version: '2012-10-17',
        Statement: [
          {
            Action: ['sts:AssumeRole'],
            Effect: 'Allow',
            Principal: { Service: ['codedeploy.amazonaws.com'] }
          }
        ]
      }
    }
  }
  if (codeDeployRolePermissionsBoundaryArn) {
    Object.assign(iamRoleCodeDeploy.Properties, { PermissionsBoundary: codeDeployRolePermissionsBoundaryArn })
  }
  return iamRoleCodeDeploy
}

const Iam = {
  buildCodeDeployRole
}

module.exports = Iam