integ.cicd.expected.json

{
  "Resources": {
    "ArtifactBucket7410C9EF": {
      "Type": "AWS::S3::Bucket",
      "UpdateReplacePolicy": "Delete",
      "DeletionPolicy": "Delete"
    },
    "CodePipelineRoleB3A660B4": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Principal": {
                "Service": "codepipeline.amazonaws.com"
              }
            }
          ],
          "Version": "2012-10-17"
        }
      }
    },
    "CodePipelineRoleDefaultPolicy8D520A8D": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyDocument": {
          "Statement": [
            {
              "Action": [
                "s3:GetObject*",
                "s3:GetBucket*",
                "s3:List*",
                "s3:DeleteObject*",
                "s3:PutObject",
                "s3:Abort*"
              ],
              "Effect": "Allow",
              "Resource": [
                {
                  "Fn::GetAtt": [
                    "ArtifactBucket7410C9EF",
                    "Arn"
                  ]
                },
                {
                  "Fn::Join": [
                    "",
                    [
                      {
                        "Fn::GetAtt": [
                          "ArtifactBucket7410C9EF",
                          "Arn"
                        ]
                      },
                      "/*"
                    ]
                  ]
                }
              ]
            },
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Resource": [
                {
                  "Fn::GetAtt": [
                    "CodePipelineDeployExecuteCodePipelineActionRoleAE36AF49",
                    "Arn"
                  ]
                },
                {
                  "Fn::GetAtt": [
                    "CodePipelineDeployChangeSetCodePipelineActionRoleB3BCDD8A",
                    "Arn"
                  ]
                }
              ]
            }
          ],
          "Version": "2012-10-17"
        },
        "PolicyName": "CodePipelineRoleDefaultPolicy8D520A8D",
        "Roles": [
          {
            "Ref": "CodePipelineRoleB3A660B4"
          }
        ]
      }
    },
    "CodePipelineB74E5936": {
      "Type": "AWS::CodePipeline::Pipeline",
      "Properties": {
        "RoleArn": {
          "Fn::GetAtt": [
            "CodePipelineRoleB3A660B4",
            "Arn"
          ]
        },
        "Stages": [
          {
            "Actions": [
              {
                "ActionTypeId": {
                  "Category": "Source",
                  "Owner": "ThirdParty",
                  "Provider": "GitHub",
                  "Version": "1"
                },
                "Configuration": {
                  "Owner": "awslabs",
                  "Repo": "aws-cdk",
                  "Branch": "master",
                  "OAuthToken": "DummyToken",
                  "PollForSourceChanges": true
                },
                "Name": "GitHub",
                "OutputArtifacts": [
                  {
                    "Name": "Artifact_CICDGitHubF8BA7ADD"
                  }
                ],
                "RunOrder": 1
              }
            ],
            "Name": "Source"
          },
          {
            "Actions": [
              {
                "ActionTypeId": {
                  "Category": "Deploy",
                  "Owner": "AWS",
                  "Provider": "CloudFormation",
                  "Version": "1"
                },
                "Configuration": {
                  "StackName": "CICD",
                  "RoleArn": {
                    "Fn::GetAtt": [
                      "CodePipelineDeployChangeSetRoleF9F2B343",
                      "Arn"
                    ]
                  },
                  "ActionMode": "CHANGE_SET_REPLACE",
                  "ChangeSetName": "CICD-ChangeSet",
                  "TemplatePath": "Artifact_CICDGitHubF8BA7ADD::CICD.template.json"
                },
                "InputArtifacts": [
                  {
                    "Name": "Artifact_CICDGitHubF8BA7ADD"
                  }
                ],
                "Name": "ChangeSet",
                "RoleArn": {
                  "Fn::GetAtt": [
                    "CodePipelineDeployChangeSetCodePipelineActionRoleB3BCDD8A",
                    "Arn"
                  ]
                },
                "RunOrder": 10
              },
              {
                "ActionTypeId": {
                  "Category": "Deploy",
                  "Owner": "AWS",
                  "Provider": "CloudFormation",
                  "Version": "1"
                },
                "Configuration": {
                  "StackName": "CICD",
                  "ActionMode": "CHANGE_SET_EXECUTE",
                  "ChangeSetName": "CICD-ChangeSet"
                },
                "Name": "Execute",
                "RoleArn": {
                  "Fn::GetAtt": [
                    "CodePipelineDeployExecuteCodePipelineActionRoleAE36AF49",
                    "Arn"
                  ]
                },
                "RunOrder": 999
              }
            ],
            "Name": "Deploy"
          }
        ],
        "ArtifactStore": {
          "Location": {
            "Ref": "ArtifactBucket7410C9EF"
          },
          "Type": "S3"
        }
      },
      "DependsOn": [
        "CodePipelineRoleDefaultPolicy8D520A8D",
        "CodePipelineRoleB3A660B4"
      ]
    },
    "CodePipelineDeployExecuteCodePipelineActionRoleAE36AF49": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Principal": {
                "AWS": {
                  "Fn::Join": [
                    "",
                    [
                      "arn:",
                      {
                        "Ref": "AWS::Partition"
                      },
                      ":iam::",
                      {
                        "Ref": "AWS::AccountId"
                      },
                      ":root"
                    ]
                  ]
                }
              }
            }
          ],
          "Version": "2012-10-17"
        }
      }
    },
    "CodePipelineDeployExecuteCodePipelineActionRoleDefaultPolicy2B66E78C": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyDocument": {
          "Statement": [
            {
              "Action": [
                "cloudformation:DescribeChangeSet",
                "cloudformation:DescribeStacks",
                "cloudformation:ExecuteChangeSet"
              ],
              "Condition": {
                "StringEqualsIfExists": {
                  "cloudformation:ChangeSetName": "CICD-ChangeSet"
                }
              },
              "Effect": "Allow",
              "Resource": {
                "Fn::Join": [
                  "",
                  [
                    "arn:",
                    {
                      "Ref": "AWS::Partition"
                    },
                    ":cloudformation:",
                    {
                      "Ref": "AWS::Region"
                    },
                    ":",
                    {
                      "Ref": "AWS::AccountId"
                    },
                    ":stack/CICD/*"
                  ]
                ]
              }
            }
          ],
          "Version": "2012-10-17"
        },
        "PolicyName": "CodePipelineDeployExecuteCodePipelineActionRoleDefaultPolicy2B66E78C",
        "Roles": [
          {
            "Ref": "CodePipelineDeployExecuteCodePipelineActionRoleAE36AF49"
          }
        ]
      }
    },
    "CodePipelineDeployChangeSetCodePipelineActionRoleB3BCDD8A": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Principal": {
                "AWS": {
                  "Fn::Join": [
                    "",
                    [
                      "arn:",
                      {
                        "Ref": "AWS::Partition"
                      },
                      ":iam::",
                      {
                        "Ref": "AWS::AccountId"
                      },
                      ":root"
                    ]
                  ]
                }
              }
            }
          ],
          "Version": "2012-10-17"
        }
      }
    },
    "CodePipelineDeployChangeSetCodePipelineActionRoleDefaultPolicy87FA0C1E": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyDocument": {
          "Statement": [
            {
              "Action": "iam:PassRole",
              "Effect": "Allow",
              "Resource": {
                "Fn::GetAtt": [
                  "CodePipelineDeployChangeSetRoleF9F2B343",
                  "Arn"
                ]
              }
            },
            {
              "Action": [
                "s3:GetObject*",
                "s3:GetBucket*",
                "s3:List*"
              ],
              "Effect": "Allow",
              "Resource": [
                {
                  "Fn::GetAtt": [
                    "ArtifactBucket7410C9EF",
                    "Arn"
                  ]
                },
                {
                  "Fn::Join": [
                    "",
                    [
                      {
                        "Fn::GetAtt": [
                          "ArtifactBucket7410C9EF",
                          "Arn"
                        ]
                      },
                      "/*"
                    ]
                  ]
                }
              ]
            },
            {
              "Action": [
                "cloudformation:CreateChangeSet",
                "cloudformation:DeleteChangeSet",
                "cloudformation:DescribeChangeSet",
                "cloudformation:DescribeStacks"
              ],
              "Condition": {
                "StringEqualsIfExists": {
                  "cloudformation:ChangeSetName": "CICD-ChangeSet"
                }
              },
              "Effect": "Allow",
              "Resource": {
                "Fn::Join": [
                  "",
                  [
                    "arn:",
                    {
                      "Ref": "AWS::Partition"
                    },
                    ":cloudformation:",
                    {
                      "Ref": "AWS::Region"
                    },
                    ":",
                    {
                      "Ref": "AWS::AccountId"
                    },
                    ":stack/CICD/*"
                  ]
                ]
              }
            }
          ],
          "Version": "2012-10-17"
        },
        "PolicyName": "CodePipelineDeployChangeSetCodePipelineActionRoleDefaultPolicy87FA0C1E",
        "Roles": [
          {
            "Ref": "CodePipelineDeployChangeSetCodePipelineActionRoleB3BCDD8A"
          }
        ]
      }
    },
    "CodePipelineDeployChangeSetRoleF9F2B343": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Action": "sts:AssumeRole",
              "Effect": "Allow",
              "Principal": {
                "Service": "cloudformation.amazonaws.com"
              }
            }
          ],
          "Version": "2012-10-17"
        }
      }
    },
    "CodePipelineDeployChangeSetRoleDefaultPolicy289820BE": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyDocument": {
          "Statement": [
            {
              "Action": [
                "s3:GetObject*",
                "s3:GetBucket*",
                "s3:List*"
              ],
              "Effect": "Allow",
              "Resource": [
                {
                  "Fn::GetAtt": [
                    "ArtifactBucket7410C9EF",
                    "Arn"
                  ]
                },
                {
                  "Fn::Join": [
                    "",
                    [
                      {
                        "Fn::GetAtt": [
                          "ArtifactBucket7410C9EF",
                          "Arn"
                        ]
                      },
                      "/*"
                    ]
                  ]
                }
              ]
            }
          ],
          "Version": "2012-10-17"
        },
        "PolicyName": "CodePipelineDeployChangeSetRoleDefaultPolicy289820BE",
        "Roles": [
          {
            "Ref": "CodePipelineDeployChangeSetRoleF9F2B343"
          }
        ]
      }
    }
  }
}