Example usage for com.amazonaws.services.identitymanagement AmazonIdentityManagement updateAssumeRolePolicy

Introduction

In this page you can find the example usage for com.amazonaws.services.identitymanagement AmazonIdentityManagement updateAssumeRolePolicy.

Prototype

UpdateAssumeRolePolicyResult updateAssumeRolePolicy(
        UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest);

Source Link

Document

Updates the policy that grants an IAM entity permission to assume a role.

Usage

From source file:squash.deployment.lambdas.CognitoCustomResourceLambda.java

License:Apache License

void addRolesToIdentityPool(String unauthenticatedRoleName, String unauthenticatedRole,
        String authenticatedRoleName, String authenticatedRole, String identityPoolId,
        AmazonCognitoIdentity client, LambdaLogger logger) {
    // First update the roles to use the actual pool id in their conditions
    logger.log("Updating authenticated and unauthenticated roles to use the actual identity pool id: "
            + identityPoolId);/* w w  w  . j  a  v a  2  s. com*/
    AmazonIdentityManagement iamClient = AmazonIdentityManagementClientBuilder.standard().build();
    UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest = new UpdateAssumeRolePolicyRequest();
    updateAssumeRolePolicyRequest.setRoleName(unauthenticatedRoleName);
    updateAssumeRolePolicyRequest.setPolicyDocument(getAssumeRolePolicyDocument(false, identityPoolId, logger));
    iamClient.updateAssumeRolePolicy(updateAssumeRolePolicyRequest);
    updateAssumeRolePolicyRequest.setRoleName(authenticatedRoleName);
    updateAssumeRolePolicyRequest.setPolicyDocument(getAssumeRolePolicyDocument(true, identityPoolId, logger));
    iamClient.updateAssumeRolePolicy(updateAssumeRolePolicyRequest);

    // And add the updated roles to the pool
    logger.log("Adding updated authenticated and unauthenticated roles to the identity pool");
    SetIdentityPoolRolesRequest setIdentityPoolRolesRequest = new SetIdentityPoolRolesRequest();
    setIdentityPoolRolesRequest.addRolesEntry("authenticated", authenticatedRole);
    setIdentityPoolRolesRequest.addRolesEntry("unauthenticated", unauthenticatedRole);
    setIdentityPoolRolesRequest.setIdentityPoolId(identityPoolId);
    client.setIdentityPoolRoles(setIdentityPoolRolesRequest);
}

---