edgegate_attach_byo_role
Validate and activate a bring-your-own IAM role for EdgeGate storage. EdgeGate assumes the role and runs a probe, returning a checklist of misconfigurations if verification fails.
Instructions
Phase 2 of edgegate_setup_byo_storage. Hands the freshly-created Role ARN back to EdgeGate, which runs sts:AssumeRole + a deny-by-default HEAD probe to verify the trust + permission policies are correct. Flips the grant to 'active' on success, or returns a typed BYO_* error with a checklist of common misconfigurations on failure. Re-callable with the same role_arn after fixing IAM.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role_arn | Yes | ARN of the IAM role created in step 3 of edgegate_setup_byo_storage. Format: arn:aws:iam::<account-id>:role/<name>. EdgeGate will sts:AssumeRole this immediately to verify the trust + permission policies are correct. | |
| workspace_id | Yes |