mpa_support_access.yml

AWSTemplateFormatVersion: 2010-09-09
Description: Installs IAM role and policy to allow Support Center access to PCS's CSKAccountProvisioner production role.
Resources:
  TerraformAdministratorRole: 
    Type: "AWS::IAM::Role"
    Properties: 
      RoleName: PCSSupportAccessRole
      MaxSessionDuration: 3600
      AssumeRolePolicyDocument: 
        Version: "2012-10-17"
        Statement: 
          - 
            Effect: "Allow"
            Principal: 
              AWS: 
                - arn:aws:iam::288355854428:role/CSKAccountProvisioner
            Action: 
              - "sts:AssumeRole"
      Path: "/"
      Policies:
        - PolicyName: PCSSupportCenterAccess
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Effect: Allow
                Resource: "*"
                Action: "support:*"