@pulumi/aws 7.43.0 → 7.44.0-alpha.1787638401

package/guardduty/publishingDestination.js

@@ -46,44 +46,44 @@ const utilities = __importStar(require("../utilities"));
  * const bucketPol = aws.iam.getPolicyDocumentOutput({
  *     statements: [
  *         {
- *             sid: "Allow PutObject",
- *             actions: ["s3:PutObject"],
- *             resources: [pulumi.interpolate`${gdBucket.arn}/*`],
  *             principals: [{
  *                 type: "Service",
  *                 identifiers: ["guardduty.amazonaws.com"],
  *             }],
+ *             sid: "Allow PutObject",
+ *             actions: ["s3:PutObject"],
+ *             resources: [pulumi.interpolate`${gdBucket.arn}/*`],
  *         },
  *         {
- *             sid: "Allow GetBucketLocation",
- *             actions: ["s3:GetBucketLocation"],
- *             resources: [gdBucket.arn],
  *             principals: [{
  *                 type: "Service",
  *                 identifiers: ["guardduty.amazonaws.com"],
  *             }],
+ *             sid: "Allow GetBucketLocation",
+ *             actions: ["s3:GetBucketLocation"],
+ *             resources: [gdBucket.arn],
  *         },
  *     ],
  * });
  * const kmsPol = Promise.all([currentGetRegion, current]).then(([currentGetRegion, current]) => aws.iam.getPolicyDocument({
  *     statements: [
  *         {
- *             sid: "Allow GuardDuty to encrypt findings",
- *             actions: ["kms:GenerateDataKey"],
- *             resources: [`arn:aws:kms:${currentGetRegion.region}:${current.accountId}:key/*`],
  *             principals: [{
  *                 type: "Service",
  *                 identifiers: ["guardduty.amazonaws.com"],
  *             }],
+ *             sid: "Allow GuardDuty to encrypt findings",
+ *             actions: ["kms:GenerateDataKey"],
+ *             resources: [`arn:aws:kms:${currentGetRegion.region}:${current.accountId}:key/*`],
  *         },
  *         {
- *             sid: "Allow all users to modify/delete key (test only)",
- *             actions: ["kms:*"],
- *             resources: [`arn:aws:kms:${currentGetRegion.region}:${current.accountId}:key/*`],
  *             principals: [{
  *                 type: "AWS",
  *                 identifiers: [`arn:aws:iam::${current.accountId}:root`],
  *             }],
+ *             sid: "Allow all users to modify/delete key (test only)",
+ *             actions: ["kms:*"],
+ *             resources: [`arn:aws:kms:${currentGetRegion.region}:${current.accountId}:key/*`],
  *         },
  *     ],
  * }));

package/iam/getPolicyDocument.d.ts

@@ -25,8 +25,6 @@ import * as outputs from "../types/output";
  *             resources: ["arn:aws:s3:::*"],
  *         },
  *         {
- *             actions: ["s3:ListBucket"],
- *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *             conditions: [{
  *                 test: "StringLike",
  *                 variable: "s3:prefix",
@@ -36,6 +34,8 @@ import * as outputs from "../types/output";
  *                     "home/&{aws:username}/",
  *                 ],
  *             }],
+ *             actions: ["s3:ListBucket"],
+ *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *         },
  *         {
  *             actions: ["s3:*"],
@@ -63,11 +63,6 @@ import * as outputs from "../types/output";
  *
  * const exampleMultipleConditionKeysAndValues = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: [
- *             "kms:Decrypt",
- *             "kms:GenerateDataKey",
- *         ],
- *         resources: ["*"],
  *         conditions: [
  *             {
  *                 test: "ForAnyValue:StringEquals",
@@ -88,6 +83,11 @@ import * as outputs from "../types/output";
  *                 ],
  *             },
  *         ],
+ *         actions: [
+ *             "kms:Decrypt",
+ *             "kms:GenerateDataKey",
+ *         ],
+ *         resources: ["*"],
  *     }],
  * });
  * ```
@@ -104,7 +104,6 @@ import * as outputs from "../types/output";
  *
  * const eventStreamBucketRoleAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [
  *             {
  *                 type: "Service",
@@ -122,6 +121,7 @@ import * as outputs from "../types/output";
  *                 ],
  *             },
  *         ],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * ```
@@ -146,7 +146,6 @@ import * as outputs from "../types/output";
  *     ],
  * });
  * const sourceDocumentExample = source.then(source => aws.iam.getPolicyDocument({
- *     sourcePolicyDocuments: [source.json],
  *     statements: [{
  *         sid: "SidToOverride",
  *         actions: ["s3:*"],
@@ -155,6 +154,7 @@ import * as outputs from "../types/output";
  *             "arn:aws:s3:::somebucket/*",
  *         ],
  *     }],
+ *     sourcePolicyDocuments: [source.json],
  * }));
  * ```
  *
@@ -174,7 +174,6 @@ import * as outputs from "../types/output";
  *     }],
  * });
  * const overridePolicyDocumentExample = override.then(override => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [override.json],
  *     statements: [
  *         {
  *             actions: ["ec2:*"],
@@ -189,6 +188,7 @@ import * as outputs from "../types/output";
  *             ],
  *         },
  *     ],
+ *     overridePolicyDocuments: [override.json],
  * }));
  * ```
  *
@@ -306,17 +306,17 @@ import * as outputs from "../types/output";
  *     }],
  * });
  * const combined = Promise.all([policyOne, policyTwo, policyThree]).then(([policyOne, policyTwo, policyThree]) => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [
- *         policyOne.json,
- *         policyTwo.json,
- *         policyThree.json,
- *     ],
  *     statements: [{
  *         sid: "OverridePlaceHolderTwo",
  *         effect: "Deny",
  *         actions: ["*"],
  *         resources: ["*"],
  *     }],
+ *     overridePolicyDocuments: [
+ *         policyOne.json,
+ *         policyTwo.json,
+ *         policyThree.json,
+ *     ],
  * }));
  * ```
  *
@@ -410,8 +410,6 @@ export interface GetPolicyDocumentResult {
  *             resources: ["arn:aws:s3:::*"],
  *         },
  *         {
- *             actions: ["s3:ListBucket"],
- *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *             conditions: [{
  *                 test: "StringLike",
  *                 variable: "s3:prefix",
@@ -421,6 +419,8 @@ export interface GetPolicyDocumentResult {
  *                     "home/&{aws:username}/",
  *                 ],
  *             }],
+ *             actions: ["s3:ListBucket"],
+ *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *         },
  *         {
  *             actions: ["s3:*"],
@@ -448,11 +448,6 @@ export interface GetPolicyDocumentResult {
  *
  * const exampleMultipleConditionKeysAndValues = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: [
- *             "kms:Decrypt",
- *             "kms:GenerateDataKey",
- *         ],
- *         resources: ["*"],
  *         conditions: [
  *             {
  *                 test: "ForAnyValue:StringEquals",
@@ -473,6 +468,11 @@ export interface GetPolicyDocumentResult {
  *                 ],
  *             },
  *         ],
+ *         actions: [
+ *             "kms:Decrypt",
+ *             "kms:GenerateDataKey",
+ *         ],
+ *         resources: ["*"],
  *     }],
  * });
  * ```
@@ -489,7 +489,6 @@ export interface GetPolicyDocumentResult {
  *
  * const eventStreamBucketRoleAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [
  *             {
  *                 type: "Service",
@@ -507,6 +506,7 @@ export interface GetPolicyDocumentResult {
  *                 ],
  *             },
  *         ],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * ```
@@ -531,7 +531,6 @@ export interface GetPolicyDocumentResult {
  *     ],
  * });
  * const sourceDocumentExample = source.then(source => aws.iam.getPolicyDocument({
- *     sourcePolicyDocuments: [source.json],
  *     statements: [{
  *         sid: "SidToOverride",
  *         actions: ["s3:*"],
@@ -540,6 +539,7 @@ export interface GetPolicyDocumentResult {
  *             "arn:aws:s3:::somebucket/*",
  *         ],
  *     }],
+ *     sourcePolicyDocuments: [source.json],
  * }));
  * ```
  *
@@ -559,7 +559,6 @@ export interface GetPolicyDocumentResult {
  *     }],
  * });
  * const overridePolicyDocumentExample = override.then(override => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [override.json],
  *     statements: [
  *         {
  *             actions: ["ec2:*"],
@@ -574,6 +573,7 @@ export interface GetPolicyDocumentResult {
  *             ],
  *         },
  *     ],
+ *     overridePolicyDocuments: [override.json],
  * }));
  * ```
  *
@@ -691,17 +691,17 @@ export interface GetPolicyDocumentResult {
  *     }],
  * });
  * const combined = Promise.all([policyOne, policyTwo, policyThree]).then(([policyOne, policyTwo, policyThree]) => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [
- *         policyOne.json,
- *         policyTwo.json,
- *         policyThree.json,
- *     ],
  *     statements: [{
  *         sid: "OverridePlaceHolderTwo",
  *         effect: "Deny",
  *         actions: ["*"],
  *         resources: ["*"],
  *     }],
+ *     overridePolicyDocuments: [
+ *         policyOne.json,
+ *         policyTwo.json,
+ *         policyThree.json,
+ *     ],
  * }));
  * ```
  *

package/iam/getPolicyDocument.js

@@ -52,8 +52,6 @@ const utilities = __importStar(require("../utilities"));
  *             resources: ["arn:aws:s3:::*"],
  *         },
  *         {
- *             actions: ["s3:ListBucket"],
- *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *             conditions: [{
  *                 test: "StringLike",
  *                 variable: "s3:prefix",
@@ -63,6 +61,8 @@ const utilities = __importStar(require("../utilities"));
  *                     "home/&{aws:username}/",
  *                 ],
  *             }],
+ *             actions: ["s3:ListBucket"],
+ *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *         },
  *         {
  *             actions: ["s3:*"],
@@ -90,11 +90,6 @@ const utilities = __importStar(require("../utilities"));
  *
  * const exampleMultipleConditionKeysAndValues = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: [
- *             "kms:Decrypt",
- *             "kms:GenerateDataKey",
- *         ],
- *         resources: ["*"],
  *         conditions: [
  *             {
  *                 test: "ForAnyValue:StringEquals",
@@ -115,6 +110,11 @@ const utilities = __importStar(require("../utilities"));
  *                 ],
  *             },
  *         ],
+ *         actions: [
+ *             "kms:Decrypt",
+ *             "kms:GenerateDataKey",
+ *         ],
+ *         resources: ["*"],
  *     }],
  * });
  * ```
@@ -131,7 +131,6 @@ const utilities = __importStar(require("../utilities"));
  *
  * const eventStreamBucketRoleAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [
  *             {
  *                 type: "Service",
@@ -149,6 +148,7 @@ const utilities = __importStar(require("../utilities"));
  *                 ],
  *             },
  *         ],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * ```
@@ -173,7 +173,6 @@ const utilities = __importStar(require("../utilities"));
  *     ],
  * });
  * const sourceDocumentExample = source.then(source => aws.iam.getPolicyDocument({
- *     sourcePolicyDocuments: [source.json],
  *     statements: [{
  *         sid: "SidToOverride",
  *         actions: ["s3:*"],
@@ -182,6 +181,7 @@ const utilities = __importStar(require("../utilities"));
  *             "arn:aws:s3:::somebucket/*",
  *         ],
  *     }],
+ *     sourcePolicyDocuments: [source.json],
  * }));
  * ```
  *
@@ -201,7 +201,6 @@ const utilities = __importStar(require("../utilities"));
  *     }],
  * });
  * const overridePolicyDocumentExample = override.then(override => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [override.json],
  *     statements: [
  *         {
  *             actions: ["ec2:*"],
@@ -216,6 +215,7 @@ const utilities = __importStar(require("../utilities"));
  *             ],
  *         },
  *     ],
+ *     overridePolicyDocuments: [override.json],
  * }));
  * ```
  *
@@ -333,17 +333,17 @@ const utilities = __importStar(require("../utilities"));
  *     }],
  * });
  * const combined = Promise.all([policyOne, policyTwo, policyThree]).then(([policyOne, policyTwo, policyThree]) => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [
- *         policyOne.json,
- *         policyTwo.json,
- *         policyThree.json,
- *     ],
  *     statements: [{
  *         sid: "OverridePlaceHolderTwo",
  *         effect: "Deny",
  *         actions: ["*"],
  *         resources: ["*"],
  *     }],
+ *     overridePolicyDocuments: [
+ *         policyOne.json,
+ *         policyTwo.json,
+ *         policyThree.json,
+ *     ],
  * }));
  * ```
  *
@@ -387,8 +387,6 @@ exports.getPolicyDocument = getPolicyDocument;
  *             resources: ["arn:aws:s3:::*"],
  *         },
  *         {
- *             actions: ["s3:ListBucket"],
- *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *             conditions: [{
  *                 test: "StringLike",
  *                 variable: "s3:prefix",
@@ -398,6 +396,8 @@ exports.getPolicyDocument = getPolicyDocument;
  *                     "home/&{aws:username}/",
  *                 ],
  *             }],
+ *             actions: ["s3:ListBucket"],
+ *             resources: [`arn:aws:s3:::${s3BucketName}`],
  *         },
  *         {
  *             actions: ["s3:*"],
@@ -425,11 +425,6 @@ exports.getPolicyDocument = getPolicyDocument;
  *
  * const exampleMultipleConditionKeysAndValues = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: [
- *             "kms:Decrypt",
- *             "kms:GenerateDataKey",
- *         ],
- *         resources: ["*"],
  *         conditions: [
  *             {
  *                 test: "ForAnyValue:StringEquals",
@@ -450,6 +445,11 @@ exports.getPolicyDocument = getPolicyDocument;
  *                 ],
  *             },
  *         ],
+ *         actions: [
+ *             "kms:Decrypt",
+ *             "kms:GenerateDataKey",
+ *         ],
+ *         resources: ["*"],
  *     }],
  * });
  * ```
@@ -466,7 +466,6 @@ exports.getPolicyDocument = getPolicyDocument;
  *
  * const eventStreamBucketRoleAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [
  *             {
  *                 type: "Service",
@@ -484,6 +483,7 @@ exports.getPolicyDocument = getPolicyDocument;
  *                 ],
  *             },
  *         ],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * ```
@@ -508,7 +508,6 @@ exports.getPolicyDocument = getPolicyDocument;
  *     ],
  * });
  * const sourceDocumentExample = source.then(source => aws.iam.getPolicyDocument({
- *     sourcePolicyDocuments: [source.json],
  *     statements: [{
  *         sid: "SidToOverride",
  *         actions: ["s3:*"],
@@ -517,6 +516,7 @@ exports.getPolicyDocument = getPolicyDocument;
  *             "arn:aws:s3:::somebucket/*",
  *         ],
  *     }],
+ *     sourcePolicyDocuments: [source.json],
  * }));
  * ```
  *
@@ -536,7 +536,6 @@ exports.getPolicyDocument = getPolicyDocument;
  *     }],
  * });
  * const overridePolicyDocumentExample = override.then(override => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [override.json],
  *     statements: [
  *         {
  *             actions: ["ec2:*"],
@@ -551,6 +550,7 @@ exports.getPolicyDocument = getPolicyDocument;
  *             ],
  *         },
  *     ],
+ *     overridePolicyDocuments: [override.json],
  * }));
  * ```
  *
@@ -668,17 +668,17 @@ exports.getPolicyDocument = getPolicyDocument;
  *     }],
  * });
  * const combined = Promise.all([policyOne, policyTwo, policyThree]).then(([policyOne, policyTwo, policyThree]) => aws.iam.getPolicyDocument({
- *     overridePolicyDocuments: [
- *         policyOne.json,
- *         policyTwo.json,
- *         policyThree.json,
- *     ],
  *     statements: [{
  *         sid: "OverridePlaceHolderTwo",
  *         effect: "Deny",
  *         actions: ["*"],
  *         resources: ["*"],
  *     }],
+ *     overridePolicyDocuments: [
+ *         policyOne.json,
+ *         policyTwo.json,
+ *         policyThree.json,
+ *     ],
  * }));
  * ```
  *

package/iam/getServerCertificate.d.ts

@@ -13,7 +13,6 @@ import * as pulumi from "@pulumi/pulumi";
  *     latest: true,
  * });
  * const elb = new aws.elb.LoadBalancer("elb", {
- *     name: "my-domain-elb",
  *     listeners: [{
  *         instancePort: 8000,
  *         instanceProtocol: "https",
@@ -21,6 +20,7 @@ import * as pulumi from "@pulumi/pulumi";
  *         lbProtocol: "https",
  *         sslCertificateId: my_domain.then(my_domain => my_domain.arn),
  *     }],
+ *     name: "my-domain-elb",
  * });
  * ```
  */
@@ -97,7 +97,6 @@ export interface GetServerCertificateResult {
  *     latest: true,
  * });
  * const elb = new aws.elb.LoadBalancer("elb", {
- *     name: "my-domain-elb",
  *     listeners: [{
  *         instancePort: 8000,
  *         instanceProtocol: "https",
@@ -105,6 +104,7 @@ export interface GetServerCertificateResult {
  *         lbProtocol: "https",
  *         sslCertificateId: my_domain.then(my_domain => my_domain.arn),
  *     }],
+ *     name: "my-domain-elb",
  * });
  * ```
  */

package/iam/getServerCertificate.js

@@ -42,7 +42,6 @@ const utilities = __importStar(require("../utilities"));
  *     latest: true,
  * });
  * const elb = new aws.elb.LoadBalancer("elb", {
- *     name: "my-domain-elb",
  *     listeners: [{
  *         instancePort: 8000,
  *         instanceProtocol: "https",
@@ -50,6 +49,7 @@ const utilities = __importStar(require("../utilities"));
  *         lbProtocol: "https",
  *         sslCertificateId: my_domain.then(my_domain => my_domain.arn),
  *     }],
+ *     name: "my-domain-elb",
  * });
  * ```
  */
@@ -78,7 +78,6 @@ exports.getServerCertificate = getServerCertificate;
  *     latest: true,
  * });
  * const elb = new aws.elb.LoadBalancer("elb", {
- *     name: "my-domain-elb",
  *     listeners: [{
  *         instancePort: 8000,
  *         instanceProtocol: "https",
@@ -86,6 +85,7 @@ exports.getServerCertificate = getServerCertificate;
  *         lbProtocol: "https",
  *         sslCertificateId: my_domain.then(my_domain => my_domain.arn),
  *     }],
+ *     name: "my-domain-elb",
  * });
  * ```
  */

package/iam/instanceProfile.d.ts

@@ -13,11 +13,11 @@ import { Role } from "./index";
  *
  * const assumeRole = aws.iam.getPolicyDocument({
  *     statements: [{
- *         effect: "Allow",
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         effect: "Allow",
  *         actions: ["sts:AssumeRole"],
  *     }],
  * });

package/iam/instanceProfile.js

@@ -41,11 +41,11 @@ const utilities = __importStar(require("../utilities"));
  *
  * const assumeRole = aws.iam.getPolicyDocument({
  *     statements: [{
- *         effect: "Allow",
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         effect: "Allow",
  *         actions: ["sts:AssumeRole"],
  *     }],
  * });

package/iam/policyAttachment.d.ts

@@ -20,11 +20,11 @@ import { Group, Role, User } from "./index";
  * const user = new aws.iam.User("user", {name: "example-user"});
  * const assumeRole = aws.iam.getPolicyDocument({
  *     statements: [{
- *         effect: "Allow",
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         effect: "Allow",
  *         actions: ["sts:AssumeRole"],
  *     }],
  * });

package/iam/policyAttachment.js

@@ -48,11 +48,11 @@ const utilities = __importStar(require("../utilities"));
  * const user = new aws.iam.User("user", {name: "example-user"});
  * const assumeRole = aws.iam.getPolicyDocument({
  *     statements: [{
- *         effect: "Allow",
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         effect: "Allow",
  *         actions: ["sts:AssumeRole"],
  *     }],
  * });

package/iam/role.d.ts

@@ -45,11 +45,11 @@ import * as outputs from "../types/output";
  *
  * const instanceAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * const instance = new aws.iam.Role("instance", {
@@ -76,8 +76,6 @@ import * as outputs from "../types/output";
  *     }],
  * });
  * const example = new aws.iam.Role("example", {
- *     name: "yak_role",
- *     assumeRolePolicy: instanceAssumeRolePolicy.json,
  *     inlinePolicies: [
  *         {
  *             name: "my_inline_policy",
@@ -95,6 +93,8 @@ import * as outputs from "../types/output";
  *             policy: inlinePolicy.then(inlinePolicy => inlinePolicy.json),
  *         },
  *     ],
+ *     name: "yak_role",
+ *     assumeRolePolicy: instanceAssumeRolePolicy.json,
  * });
  * ```
  *

package/iam/role.js

@@ -72,11 +72,11 @@ const utilities = __importStar(require("../utilities"));
  *
  * const instanceAssumeRolePolicy = aws.iam.getPolicyDocument({
  *     statements: [{
- *         actions: ["sts:AssumeRole"],
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         actions: ["sts:AssumeRole"],
  *     }],
  * });
  * const instance = new aws.iam.Role("instance", {
@@ -103,8 +103,6 @@ const utilities = __importStar(require("../utilities"));
  *     }],
  * });
  * const example = new aws.iam.Role("example", {
- *     name: "yak_role",
- *     assumeRolePolicy: instanceAssumeRolePolicy.json,
  *     inlinePolicies: [
  *         {
  *             name: "my_inline_policy",
@@ -122,6 +120,8 @@ const utilities = __importStar(require("../utilities"));
  *             policy: inlinePolicy.then(inlinePolicy => inlinePolicy.json),
  *         },
  *     ],
+ *     name: "yak_role",
+ *     assumeRolePolicy: instanceAssumeRolePolicy.json,
  * });
  * ```
  *

package/iam/rolePolicyAttachment.d.ts

@@ -15,11 +15,11 @@ import { Role } from "./index";
  *
  * const assumeRole = aws.iam.getPolicyDocument({
  *     statements: [{
- *         effect: "Allow",
  *         principals: [{
  *             type: "Service",
  *             identifiers: ["ec2.amazonaws.com"],
  *         }],
+ *         effect: "Allow",
  *         actions: ["sts:AssumeRole"],
  *     }],
  * });