iam :twitch_accounts do
  role :availability_monitoring do
    role_name 'inventory-read-only'
    trust account: '007917851548', role: 'inventory-read-only'
    managed_policy 'arn:aws:iam::aws:policy/ReadOnlyAccess'
  end

  role :twitch_inventory do
    role_name 'twitch-inventory'
    trust account: '578510050023', role: 'twitch-inventory-master'
    allow actions: ['ce:*'], resource: '*'
    managed_policy 'arn:aws:iam::aws:policy/ReadOnlyAccess'
    managed_policy 'arn:aws:iam::aws:policy/AWSSupportAccess'
  end

  role :teamcity_to_ecs do
    trust account: '994136867826'
    allow actions: ['ecs:*'], resource: '*'
    allow actions: ['iam:PassRole'], resource: 'arn:aws:iam::*:role/*TaskIAMRole-*'
  end
end