{
  "generated": "2026-08-19T16:08:34.074423+00:00",
  "caller": {
    "Account": "716468089330",
    "Arn": "arn:aws:iam::716468089330:user/louis"
  },
  "organization": {
    "Id": "o-qfj0pvhhv7",
    "Arn": "arn:aws:organizations::716468089330:organization/o-qfj0pvhhv7",
    "FeatureSet": "ALL",
    "MasterAccountArn": "arn:aws:organizations::716468089330:account/o-qfj0pvhhv7/716468089330",
    "MasterAccountId": "716468089330",
    "MasterAccountEmail": "ScrivasAdmin@scrivas.com",
    "AvailablePolicyTypes": [
      {
        "Type": "SERVICE_CONTROL_POLICY",
        "Status": "ENABLED"
      }
    ]
  },
  "trusted_access_services": [
    {
      "ServicePrincipal": "cloudtrail.amazonaws.com",
      "DateEnabled": "2025-10-20T14:05:58.424000-04:00"
    },
    {
      "ServicePrincipal": "guardduty.amazonaws.com",
      "DateEnabled": "2026-02-19T06:26:23.375000-05:00"
    },
    {
      "ServicePrincipal": "inspector2.amazonaws.com",
      "DateEnabled": "2026-02-19T06:26:23.873000-05:00"
    },
    {
      "ServicePrincipal": "malware-protection.guardduty.amazonaws.com",
      "DateEnabled": "2026-02-19T06:26:25.203000-05:00"
    },
    {
      "ServicePrincipal": "notifications.amazonaws.com",
      "DateEnabled": "2026-04-07T11:57:56.557000-04:00"
    },
    {
      "ServicePrincipal": "securityhub.amazonaws.com",
      "DateEnabled": "2026-02-19T06:26:23.087000-05:00"
    }
  ],
  "delegated_administrators": [],
  "org_resource_policy": {
    "error": "An error occurred (ResourcePolicyNotFoundException) when calling the DescribeResourcePolicy operation: No resource-based policy found."
  },
  "iam_role_trust_policies": [
    {
      "RoleName": "AmazonEKSAutoClusterRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/AmazonEKSAutoClusterRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": [
            "sts:AssumeRole",
            "sts:TagSession"
          ],
          "Principal": {
            "Service": "eks.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AmazonEKSAutoNodeRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/AmazonEKSAutoNodeRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AmazonEKSPodIdentityAmazonEBSCSIDriverRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/AmazonEKSPodIdentityAmazonEBSCSIDriverRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": [
            "sts:AssumeRole",
            "sts:TagSession"
          ],
          "Principal": {
            "Service": "pods.eks.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AmazonEKSPodIdentityAmazonVPCCNIRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/AmazonEKSPodIdentityAmazonVPCCNIRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": [
            "sts:AssumeRole",
            "sts:TagSession"
          ],
          "Principal": {
            "Service": "pods.eks.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AmazonEKS_EBS_CSI_DriverRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/AmazonEKS_EBS_CSI_DriverRole",
      "Kind": [
        "federated"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRoleWithWebIdentity",
          "Principal": {
            "Federated": "arn:aws:iam::716468089330:oidc-provider/oidc.eks.us-east-2.amazonaws.com/id/8C10FE346B856864E285348C79AE4EAF"
          },
          "Condition": {
            "StringEquals": {
              "oidc.eks.us-east-2.amazonaws.com/id/8C10FE346B856864E285348C79AE4EAF:aud": "sts.amazonaws.com",
              "oidc.eks.us-east-2.amazonaws.com/id/8C10FE346B856864E285348C79AE4EAF:sub": "system:serviceaccount:kube-system:ebs-csi-controller-sa"
            }
          }
        }
      ]
    },
    {
      "RoleName": "applications-eks-node-group-20251007184911320300000008",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/applications-eks-node-group-20251007184911320300000008",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAccessAnalyzer",
      "Path": "/aws-service-role/access-analyzer.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/access-analyzer.amazonaws.com/AWSServiceRoleForAccessAnalyzer",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "access-analyzer.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonEKS",
      "Path": "/aws-service-role/eks.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "eks.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonEKSNodegroup",
      "Path": "/aws-service-role/eks-nodegroup.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/eks-nodegroup.amazonaws.com/AWSServiceRoleForAmazonEKSNodegroup",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "eks-nodegroup.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonGuardDuty",
      "Path": "/aws-service-role/guardduty.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/guardduty.amazonaws.com/AWSServiceRoleForAmazonGuardDuty",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "guardduty.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonGuardDutyMalwareProtection",
      "Path": "/aws-service-role/malware-protection.guardduty.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/malware-protection.guardduty.amazonaws.com/AWSServiceRoleForAmazonGuardDutyMalwareProtection",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "malware-protection.guardduty.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonInspector2",
      "Path": "/aws-service-role/inspector2.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/inspector2.amazonaws.com/AWSServiceRoleForAmazonInspector2",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "inspector2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonInspector2Agentless",
      "Path": "/aws-service-role/agentless.inspector2.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/agentless.inspector2.amazonaws.com/AWSServiceRoleForAmazonInspector2Agentless",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "agentless.inspector2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAmazonMacie",
      "Path": "/aws-service-role/macie.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/macie.amazonaws.com/AWSServiceRoleForAmazonMacie",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "macie.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForApplicationInsights",
      "Path": "/aws-service-role/application-insights.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/application-insights.amazonaws.com/AWSServiceRoleForApplicationInsights",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "application-insights.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAutoScaling",
      "Path": "/aws-service-role/autoscaling.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "autoscaling.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForAwsUserNotifications",
      "Path": "/aws-service-role/notifications.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/notifications.amazonaws.com/AWSServiceRoleForAwsUserNotifications",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "notifications.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForCloudTrail",
      "Path": "/aws-service-role/cloudtrail.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/cloudtrail.amazonaws.com/AWSServiceRoleForCloudTrail",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "cloudtrail.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForConfig",
      "Path": "/aws-service-role/config.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "config.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForEC2Spot",
      "Path": "/aws-service-role/spot.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/spot.amazonaws.com/AWSServiceRoleForEC2Spot",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "spot.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForElasticLoadBalancing",
      "Path": "/aws-service-role/elasticloadbalancing.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "elasticloadbalancing.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForGlobalAccelerator",
      "Path": "/aws-service-role/globalaccelerator.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/globalaccelerator.amazonaws.com/AWSServiceRoleForGlobalAccelerator",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "globalaccelerator.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForOrganizations",
      "Path": "/aws-service-role/organizations.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/organizations.amazonaws.com/AWSServiceRoleForOrganizations",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "organizations.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForRDS",
      "Path": "/aws-service-role/rds.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/rds.amazonaws.com/AWSServiceRoleForRDS",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "rds.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForResourceExplorer",
      "Path": "/aws-service-role/resource-explorer-2.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/resource-explorer-2.amazonaws.com/AWSServiceRoleForResourceExplorer",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "resource-explorer-2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForSecurityHub",
      "Path": "/aws-service-role/securityhub.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/securityhub.amazonaws.com/AWSServiceRoleForSecurityHub",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "securityhub.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForSecurityHubV2",
      "Path": "/aws-service-role/securityhubv2.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/securityhubv2.amazonaws.com/AWSServiceRoleForSecurityHubV2",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "securityhubv2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForServiceQuotas",
      "Path": "/aws-service-role/servicequotas.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/servicequotas.amazonaws.com/AWSServiceRoleForServiceQuotas",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "servicequotas.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForSupport",
      "Path": "/aws-service-role/support.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/support.amazonaws.com/AWSServiceRoleForSupport",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "support.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSServiceRoleForTrustedAdvisor",
      "Path": "/aws-service-role/trustedadvisor.amazonaws.com/",
      "Arn": "arn:aws:iam::716468089330:role/aws-service-role/trustedadvisor.amazonaws.com/AWSServiceRoleForTrustedAdvisor",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "trustedadvisor.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "AWSSystemsManagerDefaultEC2InstanceManagementRole",
      "Path": "/service-role/",
      "Arn": "arn:aws:iam::716468089330:role/service-role/AWSSystemsManagerDefaultEC2InstanceManagementRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ssm.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "CloudTrailRoleForCloudWatchLogs_MainTrail",
      "Path": "/service-role/",
      "Arn": "arn:aws:iam::716468089330:role/service-role/CloudTrailRoleForCloudWatchLogs_MainTrail",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "cloudtrail.amazonaws.com"
          },
          "Condition": {
            "StringEquals": {
              "aws:SourceArn": "arn:aws:cloudtrail:us-east-2:716468089330:trail/us-east-2",
              "aws:SourceAccount": "716468089330"
            }
          }
        }
      ]
    },
    {
      "RoleName": "EC2-CloudWatchAgent-Role",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/EC2-CloudWatchAgent-Role",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "EC2-SSM-Access",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/EC2-SSM-Access",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "EC2SSMRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/EC2SSMRole",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "FlowLogsToCloudWatch",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/FlowLogsToCloudWatch",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "vpc-flow-logs.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "gpu-eks-node-group-20251007184911320100000007",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/gpu-eks-node-group-20251007184911320100000007",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "infrastructure-eks-node-group-20251007184911319500000006",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/infrastructure-eks-node-group-20251007184911319500000006",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "ec2.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "IntruderReadOnlyRole",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/IntruderReadOnlyRole",
      "Kind": [
        "cross-account/aws"
      ],
      "Vendor": "Intruder.io (external vulnerability scanning)",
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "AWS": "arn:aws:iam::123311413059:root"
          },
          "Condition": {
            "StringEquals": {
              "sts:ExternalId": "8bb7691d-579b-41ef-ae48-5cc3983bcc7f"
            }
          }
        }
      ]
    },
    {
      "RoleName": "rds-monitoring-role",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/rds-monitoring-role",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "monitoring.rds.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "scrivas-staging-cluster-20251007184855668200000001",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/scrivas-staging-cluster-20251007184855668200000001",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "eks.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "SecureframeRole-f983f1e89008",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/SecureframeRole-f983f1e89008",
      "Kind": [
        "cross-account/aws"
      ],
      "Vendor": "Secureframe (SOC 2 / compliance automation)",
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "AWS": "arn:aws:iam::728997465891:root"
          },
          "Condition": {
            "StringEquals": {
              "sts:ExternalId": "d3f0ba8c-2023-4cf6-8846-f983f1e89008"
            }
          }
        }
      ]
    },
    {
      "RoleName": "vpc-flow-logs-role",
      "Path": "/",
      "Arn": "arn:aws:iam::716468089330:role/vpc-flow-logs-role",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "vpc-flow-logs.amazonaws.com"
          },
          "Condition": null
        }
      ]
    },
    {
      "RoleName": "VPCFlowLogs-Cloudwatch-1781174191538",
      "Path": "/service-role/",
      "Arn": "arn:aws:iam::716468089330:role/service-role/VPCFlowLogs-Cloudwatch-1781174191538",
      "Kind": [
        "service"
      ],
      "Vendor": null,
      "Statements": [
        {
          "Effect": "Allow",
          "Action": "sts:AssumeRole",
          "Principal": {
            "Service": "vpc-flow-logs.amazonaws.com"
          },
          "Condition": {
            "StringEquals": {
              "aws:SourceAccount": "716468089330"
            },
            "ArnLike": {
              "aws:SourceArn": "arn:aws:ec2:us-east-2:716468089330:vpc-flow-log/*"
            }
          }
        }
      ]
    }
  ]
}