Merge pull request #4 from ImmobilienScout24/feature/integration_test…

…_arn

adding the role that can be assumed during integration test

build.py

@@ -52,6 +52,7 @@ def set_properties(project):
     project.set_property('template_files',
         [
             ('cfn-sphere/templates','crassus.yaml'),
+            ('cfn-sphere/templates','crassus_integration_test_role.yaml'),
         ])
 
     project.set_property('distutils_classifiers', [

cfn-sphere/crassus-stack-with-integration-test-support.yaml

@@ -0,0 +1,12 @@
+region: eu-west-1
+stacks:
+  crassus:
+    template-url: templates/crassus.yaml
+    parameters:
+      zipFile: latest/crassus.zip
+      bucketName: crassus-lambda-zips <Bucket Policy is set to Requester Pays>
+      triggeringUserArn: <user/role ARN which will trigger deployment via CRASSUS">
+  crassus-integrationTest-role:
+    template-url: templates/crassus_integration_test_role.yaml
+    parameters:
+      integrationTestArn: <role ARN which should be able to assume the integration-test role>

cfn-sphere/templates/crassus.yaml

@@ -177,4 +177,4 @@ Resources:
             Resource: "*"
       Queues:
         -
-          Ref: outputSqsQueue
+          Ref: outputSqsQueue

cfn-sphere/templates/crassus_integration_test_role.yaml

@@ -0,0 +1,23 @@
+AWSTemplateFormatVersion: '2010-09-09'
+Description: crassus role to support integration tests
+Parameters:
+  integrationTestArn:
+    AllowedPattern: arn:aws:iam::[0-9]{12}:[\S]+
+    ConstraintDescription: must be a valid Amazon Resource Name e.g. arn:aws:iam::123456789012:role/cld-chain
+    Description: role ARN which should be able to assume the integration-test role>
+    Type: String
+Resources:
+  integrationTestRole:
+    Type: AWS::IAM::Role
+    Properties:
+      ManagedPolicyArns: ['arn:aws:iam::aws:policy/AdministratorAccess']
+      AssumeRolePolicyDocument:
+        Statement:
+        - Action: 
+          - sts:AssumeRole
+          Effect: Allow
+          Principal:
+            AWS: 
+              Ref: integrationTestArn
+        Version: '2012-10-17'
+