attach-policy-to-role.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建RAM角色并绑定预设权限策略，支持自定义角色名与选择系统或自定义策略类型。
  en: Create RAM roles and attach predefined permission policies, supporting customization
    of role names and selection of system or custom policy types.
Parameters:
  RoleName:
    Type: String
    Description: Specifies the role name, containing up to 64 characters.
    Default: mytest
  PolicyName:
    Type: String
    Default: ReadOnlyAccess
  PolicyType:
    Type: String
    Default: System
    AllowedValues:
    - System
    - Custom
Resources:
  Role:
    Type: ALIYUN::RAM::Role
    Properties:
      RoleName:
        Ref: RoleName
      AssumeRolePolicyDocument:
        Statement:
        - Action: sts:AssumeRole
          Effect: Allow
          Principal:
            Service:
            - actiontrail.aliyuncs.com
        Version: '1'
  AttachPolicyToRole:
    Type: ALIYUN::RAM::AttachPolicyToRole
    Properties:
      PolicyName:
        Ref: PolicyName
      PolicyType: System
      RoleName:
        Fn::GetAtt:
        - Role
        - RoleName