Update role.test.ts with test for custom assumeRoleAction

aws · Aug 16, 2024 · 9077fdd · 9077fdd
1 parent 0e823a5
commit 9077fdd
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/packages/aws-cdk-lib/aws-iam/test/role.test.ts b/packages/aws-cdk-lib/aws-iam/test/role.test.ts
@@ -219,6 +219,7 @@ describe('customizeRoles', () => {
     // WHEN
     const role = new Role(stack, 'Role', {
       assumedBy: new ServicePrincipal('sns.amazonaws.com'),
+      assumeRoleAction: "sts:AssumeRoleWithWebIdentity";
     });
     const principal = Role.fromRoleName(stack, 'OtherRole', 'OtherRole');
     role.grant(principal, 'sts:AssumeRole');
@@ -288,7 +289,7 @@ describe('customizeRoles', () => {
         },
         conditions: {},
       },
-      AssumeRoleAction: 'sts:AssumeRole',
+      AssumeRoleAction: 'sts:AssumeRoleWithWebIdentity',
       PrincipalAccount: {
         Ref: 'AWS::AccountId',
       },
@@ -1435,4 +1436,4 @@ test('roleName validation with Tokens', () =>{
   }).not.toThrow('Invalid roleName');
 
   jest.clearAllMocks();
-});
+});