Serverless Access Roles Generator

A Serverless framework plugin for:

• Generate access roles for exported services (generated by serverless-export-resources plugin).
• Collect and export the result to a specific file.

Serverless configuration

The plugin is configured within the serverless.yaml by providing configuration values as the example below

custom:
  accessRolesGenerator:
    principalAccountId: principal_aws_account_id
    principalRoleName: principal_role_name
    externalId: ${self:service}-${self:provider.stage}

Variables

Variable	Usage
principalAccountId	Principal Account Id that is used to generate access role.
principalRoleName	Principal Role Name that is used to generate access role.
externalId	A string to identify the app. Can be a random string.
exportPrefix	A string to filter the exported services. Default to aser. If provided, make sure it match the configuration in serverless-export-resources plugin
outDir	Destination folder for exporting services' arn, description, and role. Default to dist/data
outFilename	Name of the file that services will be exported to. Default to service-outputs.json

References:

• For more information about principal account & role name, check this AWS document
• More information about externalId, check this AWS document