{
    "StagesAvailable": [
        "Original",
        "Processed"
    ],
    "TemplateBody": {
        "AWSTemplateFormatVersion": "2010-09-09",
        "Description": "IAM role for serviceaccount \"velero/velero-server\" [created and managed by eksctl]",
        "Outputs": {
            "Role1": {
                "Value": {
                    "Fn::GetAtt": "Role1.Arn"
                }
            }
        },
        "Resources": {
            "Role1": {
                "Properties": {
                    "AssumeRolePolicyDocument": {
                        "Statement": [
                            {
                                "Action": [
                                    "sts:AssumeRoleWithWebIdentity"
                                ],
                                "Condition": {
                                    "StringEquals": {
                                        "oidc.eks.ca-central-1.amazonaws.com/id/5134B3DC1F0DC254187FC49E9DD7B656:aud": "sts.amazonaws.com",
                                        "oidc.eks.ca-central-1.amazonaws.com/id/5134B3DC1F0DC254187FC49E9DD7B656:sub": "system:serviceaccount:velero:velero-server"
                                    }
                                },
                                "Effect": "Allow",
                                "Principal": {
                                    "Federated": "arn:aws:iam::433071079965:oidc-provider/oidc.eks.ca-central-1.amazonaws.com/id/5134B3DC1F0DC254187FC49E9DD7B656"
                                }
                            }
                        ],
                        "Version": "2012-10-17"
                    },
                    "ManagedPolicyArns": [
                        "arn:aws:iam::433071079965:policy/VeleroAccessPolicy-eks-test-hq"
                    ],
                    "RoleName": "eks-velero-backup-test-hq"
                },
                "Type": "AWS::IAM::Role"
            }
        }
    }
}