Add --role-arn option for deploy sub command.

internal/aws/cfn/cfn.go

@@ -161,7 +161,7 @@ func GetStackEvents(stackName string) ([]types.StackEvent, error) {
 }
 
 // CreateChangeSet creates a changeset
-func CreateChangeSet(template cft.Template, params []types.Parameter, tags map[string]string, stackName string) (string, error) {
+func CreateChangeSet(template cft.Template, params []types.Parameter, tags map[string]string, stackName string, roleArn string) (string, error) {
 	templateBody, err := checkTemplate(template)
 	if err != nil {
 		return "", err
@@ -192,6 +192,10 @@ func CreateChangeSet(template cft.Template, params []types.Parameter, tags map[s
 		},
 	}
 
+	if roleArn != "" {
+		input.RoleARN = ptr.String(roleArn)
+	}
+
 	if strings.HasPrefix(templateBody, "http://") {
 		input.TemplateURL = ptr.String(templateBody)
 	} else {

internal/aws/cfn/mock.go

@@ -29,6 +29,7 @@ type mockChangeSet struct {
 	params    []types.Parameter
 	tags      map[string]string
 	stackName string
+	roleArn string
 }
 
 type regionConfig struct {
@@ -159,14 +160,15 @@ func GetStackEvents(stackName string) ([]types.StackEvent, error) {
 }
 
 // CreateChangeSet creates a changeset
-func CreateChangeSet(template cft.Template, params []types.Parameter, tags map[string]string, stackName string) (string, error) {
+func CreateChangeSet(template cft.Template, params []types.Parameter, tags map[string]string, stackName string, roleArn string) (string, error) {
 	name := uuid.New().String()
 
 	region().changeSets[name] = &mockChangeSet{
 		template:  template,
 		params:    params,
 		tags:      tags,
 		stackName: stackName,
+		roleArn: roleArn,
 	}
 
 	return name, nil

internal/cmd/deploy/deploy.go

@@ -31,6 +31,7 @@ var tags []string
 var configFilePath string
 var terminationProtection bool
 var keep bool
+var roleArn string
 
 // Cmd is the deploy command's entrypoint
 var Cmd = &cobra.Command{
@@ -156,7 +157,7 @@ Tags:
 
 		// Create change set
 		spinner.Push("Creating change set")
-		changeSetName, createErr := cfn.CreateChangeSet(template, parameters, combinedTags, stackName)
+		changeSetName, createErr := cfn.CreateChangeSet(template, parameters, parsedTags, stackName, roleArn)
 		if createErr != nil {
 			panic(ui.Errorf(createErr, "error creating changeset"))
 		}
@@ -243,4 +244,5 @@ func init() {
 	Cmd.Flags().StringVarP(&configFilePath, "config", "c", "", "YAML or JSON file to set tags and parameters.")
 	Cmd.Flags().BoolVarP(&terminationProtection, "termination-protection", "t", false, "Enable  termination protection on the stack.")
 	Cmd.Flags().BoolVarP(&keep, "keep", "k", false, "Keep deployed resources after a failure by disabling rollbacks.")
+	Cmd.Flags().StringVarP(&roleArn, "role-arn", "", "", "The ARN of IAM role that AWS CloudFormation assumes to deploy the stack.")
 }

internal/cmd/deploy/deploy_test.go

@@ -54,6 +54,7 @@ func Example_deploy_help() {
 	//   -h, --help                     help for deploy
 	//   -k, --keep                     Keep deployed resources after a failure by disabling rollbacks.
 	//       --params strings           Set parameter values. Use the format key1=value1,key2=value2.
+	//       --role-arn string          The ARN of IAM role that AWS CloudFormation assumes to deploy the stack.
 	//       --tags strings             Add tags to the stack. Use the format key1=value1,key2=value2.
 	//   -t, --termination-protection   Enable  termination protection on the stack.
 	//   -y, --yes                      Don't ask questions; just deploy.