Create and manage IAM roles for the Well-Architected Review Tool
Create a new IAM role with the necessary permissions
Follow these steps to manually create the required IAM role
Create a file named trust-policy.json
with the following content:
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::ACCOUNT_ID:root" }, "Action": "sts:AssumeRole" } ] }
Replace ACCOUNT_ID
with your AWS account ID.
aws iam create-role \ --role-name WellArchitectedReviewRole \ --assume-role-policy-document file://trust-policy.json
aws iam attach-role-policy \ --role-name WellArchitectedReviewRole \ --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess