sparse-intern-71089
09/29/2022, 10:07 AMsteep-lamp-20408
09/29/2022, 10:26 AMimport pulumi_aws as aws
iam_role = aws.iam.Role(
"my-role",
name="my-role",
assume_role_policy="""{
...
}
""",
inline_policies=[
aws.iam.RoleInlinePolicyArgs(
name=f"my-policy-{stack_name}",
policy="""{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"dynamodb:BatchGetItem",
"dynamodb:GetItem",
"dynamodb:Query",
"dynamodb:Scan",
],
"Resource": "arn:aws:dynamodb:ap-northeast-1:123456:table/myTablesPrefix-{stack_name}-*"
}
]
}
""".format(stack_name=stack_name)
),
],
)
stocky-restaurant-98004
09/29/2022, 1:59 PMjson.dumps
for what it's worth. Writing a Python map is significantly easier and less fragile.