AWS::AuditManager::Assessment Role - AWS CloudFormation

AWS::AuditManager::Assessment Role

The Role property type specifies the wrapper that contains AWS Audit Manager role information, such as the role type and IAM Amazon Resource Name (ARN).

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "RoleArn" : String, "RoleType" : String }

YAML

RoleArn: String RoleType: String

Properties

RoleArn

The Amazon Resource Name (ARN) of the IAM role.

Required: No

Type: String

Minimum: 20

Maximum: 2048

Pattern: ^arn:.*:iam:.*

Update requires: No interruption

RoleType

The type of customer persona.

Note

In CreateAssessment, roleType can only be PROCESS_OWNER.

In UpdateSettings, roleType can only be PROCESS_OWNER.

In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.

Required: No

Type: String

Allowed values: PROCESS_OWNER | RESOURCE_OWNER

Update requires: No interruption

See also

  • Role in the AWS Audit Manager API Reference.