.apply

/**
 * DevOps Role
 *
 * @description role to be assumed only by IAM entities in the Admin Account.
 */
export const devopsRole = new aws.iam.Role(`${INFRA_CONFIG.ORG_NAME}-devops`, {
  assumeRolePolicy: adminAccount.id.apply(id =>
    JSON.stringify({
      Version: '2012-10-17',
      Statement: [
        {
          Action: 'sts:AssumeRole',
          Principal: {
            AWS: [id]
          },
          Effect: 'Allow',
          Sid: ''
        }
      ]
    })
  )
});

pulumi.all(...)