role.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建RAM角色，允许actiontrail服务假设角色，输出角色ID、ARN和名称。
  en: Create a RAM role, enabling the ActionTrail service to assume the role, and
    output the Role ID, ARN, and name.
Parameters:
  RoleName:
    Type: String
    Description: Specifies the role name, containing up to 64 characters.
Resources:
  Role:
    Type: ALIYUN::RAM::Role
    Properties:
      RoleName:
        Ref: RoleName
      AssumeRolePolicyDocument:
        Statement:
        - Action: sts:AssumeRole
          Effect: Allow
          Principal:
            Service:
            - actiontrail.aliyuncs.com
        Version: '1'
Outputs:
  RoleId:
    Description: Id of ram role.
    Value:
      Fn::GetAtt:
      - Role
      - RoleId
  Arn:
    Description: Name of alicloud resource.
    Value:
      Fn::GetAtt:
      - Role
      - Arn
  RoleName:
    Description: Name of ram role.
    Value:
      Fn::GetAtt:
      - Role
      - RoleName