test: Add sts:AssumeRole for Root in IAM (#4172)

aws · Jun 29, 2023 · 9dedcf9 · 9dedcf9
1 parent d7d789f
commit 9dedcf9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/test/gha/cloudformation/iam_cloudformation.yaml b/test/gha/cloudformation/iam_cloudformation.yaml
@@ -464,6 +464,10 @@ Resources:
                 token.actions.githubusercontent.com:aud: sts.amazonaws.com
               StringLike:
                 token.actions.githubusercontent.com:sub: !Sub "repo:${Repository}:ref:${Branches}"
+          - Effect: Allow
+            Principal:
+              AWS: !Sub "arn:aws:iam::${AWS::AccountId}:root"
+            Action: "sts:AssumeRole"
   FISInterruptionRole:
     Type: AWS::IAM::Role
     Properties: