roles.yml

---

- iam_role:
    name: Admin
    assume_role_policy_document: "{{ lookup('file','trust-okta.json') }}"
    managed_policy:
      - arn:aws:iam::aws:policy/AdministratorAccess
    state: present

- iam_role:
    name: Developer
    assume_role_policy_document: "{{ lookup('file','trust-okta.json') }}"
    managed_policy:
      - arn:aws:iam::aws:policy/ReadOnlyAccess
    state: present