This command creates an IAM Role.
Usage
iamrole create --name NAME
--trust-policy TRUSTPOLICY
[--tenant-id TENANT]
[--description DESCRIPTION]
[--identity-policies-ids POLICY_IDS]
[--max-session-duration DURATION]
Required Parameters
| Specifies the name of IAM Role. |
| Specifies the Trust policy, in JSON format. |
Options
| Specifies the ID of the tenant to which this IAM Role belongs. |
| Description of the IAM Role. |
| Specifies the Identity Policy IDs to attach to this role. Specify POLICY_IDS as a comma-separated list of IDs. The policies must belong to the tenant associated with the role Example: |
|
Limits the maximum duration for which a temporary access key can be granted to a requesting user, in seconds. Maximum (default): 129,600 (36 hours) Minimum: 900 (15 minutes) |
Example
This example creates a new IAM Role named "read-only-role".
vcli: admin> iamrole create --name read-only-role \
--trust-policy '{"Version":"2012-10-17","Statement":...}' \
--tenant-id 101 \
--description "Read-only role for audit" \
--identity-policies-ids 5,6