awslabs / aws-config-rdk

The AWS Config Rules Development Kit helps developers set up, author and test custom Config rules. It contains scripts to enable AWS Config, create a Config rule and test it with sample ConfigurationItems.
https://aws-config-rdk.readthedocs.io
Apache License 2.0
456 stars 174 forks source link

Add checks for IAM role used by SSM configuration #508

Open bmorrissirromb opened 4 months ago

bmorrissirromb commented 4 months ago

Within rdk deploy, there is an option to configure SSM integration. This option uses an AutomationAssumeRole value, but isn't checked to ensure that it can actually be assumed by the SSM service.

We should add some simple validation here to provide intuitive error messages if a bad SSM IAM role/policy is passed to rdk deploy.