Assumer role ARN for Fabricate

For the IAM roles that users add for a workspace, the role trust policy must allow the Fabricate's principal to call sts:AssumeRole.

To identify the Fabricate principal, the trust policy uses the Fabricate assumer role ARN.

To identify the Fabricate assumer role ARN for your Fabricate instance, you set the ARN as the value of the environment variable FABRICATE_AWS_ASSUMER_ROLE_ARN.