Table of Contents

1. Challenge

   Create IAM Role

   Create a brand-new IAM role named CSAA_AdministratorTest, and attach the AWS-managed policy titled AdministratorAccess.

   Use the following template, replacing %REPLACE_WITH_ACCOUNT_ID% with your account's ID:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Principal": {
           "AWS": "arn:aws:iam::%REPLACE_WITH_ACCOUNT_ID%:user/cloud_user"
         },
         "Action": "sts:AssumeRole",
         "Condition": {}
       }
     ]
   }
   

2. Challenge

   Assume the IAM Role

   After creation, test assumption of the IAM role using the Switch Role console option.

3. Challenge

   Create & Deploy CloudFormation Template of IAM Role

   Create a CloudFormation stack named AdministratorAccessRole, using the below YAML template:

   AWSTemplateFormatVersion: '2010-09-09'
   Description: 'CloudFormation template to create an IAM role with Administrator access'
   
   Resources:
     CSAAAdministratorRole:
       Type: AWS::IAM::Role
       Properties:
         RoleName: CSAA_Administrator
         AssumeRolePolicyDocument:
           Version: '2012-10-17'
           Statement:
             - Effect: Allow
               Principal:
                 AWS: !Sub 'arn:aws:iam::${AWS::AccountId}:user/cloud_user'
               Action: 'sts:AssumeRole'
         ManagedPolicyArns:
           - 'arn:aws:iam::aws:policy/AdministratorAccess'