Hello First time engaging in any kind of slack community I m

Question

Hello First time engaging in any kind of slack community I m following a AWS guide about cross account role access for Amazon ECS tasks see <https aws amazon com premiumsupport knowledge center ecs iam role another account > It tells me to modify the trust policy of the IAM role in the destination account However I can t find a way of modifying an existing role s trust relationship via Pulumi When creating a role I can provide the AssumeRolePolicy argument but I can t find a way to modify the role when it already exists Would anyone be so helpful and point me in the right direction on how to proceed here For context I m writing Pulumi in Go

victorious-church-57397 · Answer

Sounds like you might need to import the existing IAM role and policy then you can amend it and apply it <https www pulumi com registry packages aws api docs iam role import>

victorious-church-57397 · Answer

```pulumi import aws iam role Role desired pulumi reference name aws iam role name```

victorious-church-57397 · Answer

that adds the existing role to your current pulumi stack from there you can modify amend the role using pulumi slightly smiling face hope this solves it for you

refined-king-6688 · Answer

Hi thanks for the feedback I m quite new to pulumi and so doesn t grasp all concepts just yet I want to update the trust relationship of an already existing role that was not created by pulumi I m confused about the API not providing any functions for updating iam resources I can only see GetX LookupX and NewX functions but not any functions indicating updates of iam resources I m thinking AWS allows us to update trust relationships so why shouldn t pulumi I m sure pulumi allows me to do this but I don t know how

victorious-church-57397 · Answer

So Pulumi will have no knowledge of the IAM role as pulumi didnt create it similar to terraform If you import the existing resource to your stack you can then modify it as desired with pulumi

victorious-church-57397 · Answer

you can fetch the IAM role with get lookup etc then using the arn of that request could attach a new policy to the role if you want to manage the role with pulumi you will need to import the resource to the stack or alternatively write the pulumi code to recreate it

victorious-church-57397 · Answer

also bear in mind you would need a pulumi stack in the destination account to do this

refined-king-6688 · Answer

Thank you so much for your response Very helpful

victorious-church-57397 · Answer

no problem feel free to message me if you need anything else slightly smiling face