polite-pillow-78450
10/09/2020, 2:43 PMaws.iam.GroupPolicy(f'assume-{self.nickname.lower()}-{role}-role',
name=f'assume{role}role',
group=group,
policy=account.id.apply(lambda account_id: f'''
{{
"Version": "2012-10-17",
"Statement": [
{{
"Action": [
"sts:*"
],
"Resource": "arn:aws:iam::{account_id}:role/{role}",
"Effect": "Allow"
}}
]
}}'''),
opts=ResourceOptions(depends_on=[account]))
role
is a regular string. group
is another resource.
Thanks in advance!chilly-hairdresser-56259
10/09/2020, 3:36 PMPulumi.Output.All(resource1.id, resource2.id).Apply(lambda args: f"""{args[0]]:{args[1]}""")
polite-pillow-78450
10/10/2020, 2:59 PMgroup
is not in the string I am constructing, but it is a parameter to GroupPolicy
and should be implicitly waited for.