Question - where is the ToolsAcctCodePipelineCodeCommitRole created?

[matwerber1]

Per link below:

aws-refarch-cross-account-pipeline/ToolsAcct/code-pipeline.yaml

Line 202 in 4f075e8

- !Sub arn:aws:iam::${DevAccount}:role/ToolsAcctCodePipelineCodeCommitRole

I can't find where this role is actually created, e.g. AWS::IAM::Role in CloudFormation. Where is this coming from?

[hannonq]

Maybe a bit late, but if anyone else comes here with the same question, it is created here

In aws-refarch-cross-account-pipeline/DevAccount/toolsacct-codepipeline-codecommit.yaml:

Resources:
  Role:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub ToolsAcctCodePipelineCodeCommitRole
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          -
            Effect: Allow
            Principal:
              AWS:
                - !Ref ToolsAccount
            Action:
              - sts:AssumeRole
      Path: /

The !Sub there is actually irrelevant (cfn-linter even gives this warning), since there is no variable to substitute. So the !Sub can be removed.