Group

Source: src/AWS/IAM/Group.ts

An IAM group that can own managed and inline policies.

Group manages a shared authorization container for IAM users, including attached managed policies and embedded inline policies.

Creating IAM Groups

const group = yield* Group("SupportGroup", {
  groupName: "support",
  inlinePolicies: {
    SupportReadOnly: {
      Version: "2012-10-17",
      Statement: [{
        Effect: "Allow",
        Action: ["cloudwatch:Get*", "cloudwatch:List*"],
        Resource: ["*"],
      }],
    },
  },
});