=====================================================================
3.2. IAMロールの作成 (cognito-identity: unauthenticated)
=====================================================================

.. include:: ./_defines-iam.txt
.. include:: ./_defines-iam-role.txt

.. .. |AWS_DEFAULT_PROFILE| replace:: <IAMのフル権限を許可されたプロファイル>
.. |AWS_DEFAULT_REGION| replace:: ap-northeast-1

.. .. |AWS_ID|   replace:: XXXXXXXXXXXX
.. .. |DIR_CONF| replace:: ${HOME}/tmp/conf-iam

.. .. |IAM_ROLE_NAME|       replace:: cognito-identity-\ |COGNITO_IDPOOL_NAME|\ -role
.. .. |IAM_PRINCIPAL|       replace:: cognito-identity.amazonaws.com

.. |COGNITO_IDPOOL_NAME| replace:: handson20170904pool
.. |COGNITO_IDPOOL_ID|     replace:: |AWS_DEFAULT_REGION|\ :xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx


----------------------------------------------------------------
作業の目的 [why]
----------------------------------------------------------------

IAMロール"\ |IAM_ROLE_NAME|\ "を作成します。  

.. .. include:: ../../../resource-catalog/task-iam/iam-role-create/_display-condition-user-iam-role-create.txt

.. include:: ../../../resource-catalog/task-iam/iam-role-create/iam-role-AssumeRoleWithWebIdentity_unauthenticated-create.txt


----------------------------------------------------------------
完了
----------------------------------------------------------------