Create a New Role

Create IAM Role

Create a new IAM role with the necessary permissions

Needs permissions to create IAM roles

Manual Setup Instructions

Manual Setup

Follow these steps to manually create the required IAM role

1. Create Trust Policy

Create a file named trust-policy.json with the following content:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::ACCOUNT_ID:root"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Replace ACCOUNT_ID with your AWS account ID.

2. Create the Role with AWS CLI
aws iam create-role \
    --role-name WellArchitectedReviewRole \
    --assume-role-policy-document file://trust-policy.json
3. Attach ReadOnlyAccess Policy
aws iam attach-role-policy \
    --role-name WellArchitectedReviewRole \
    --policy-arn arn:aws:iam::aws:policy/ReadOnlyAccess

Role Created Successfully