# aws_iam_role.codebuild-eks-cicd-build-app-service-role:
resource "aws_iam_role" "codebuild-eks-cicd-build-app-service-role" {
  assume_role_policy = jsonencode(
    {
      Statement = [
        {
          Action = "sts:AssumeRole"
          Effect = "Allow"
          Principal = {
            Service = "codebuild.amazonaws.com"
          }
        },
      ]
      Version = "2012-10-17"
    }
  )
  force_detach_policies = false
  max_session_duration  = 3600
  name                  = format("%s-codebuild-eks-service-role",nonsensitive(data.aws_ssm_parameter.tf-eks-id.value))
  path                  = "/service-role/"
  tags                  = {}
}