BuildRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Statement:
          - Action: sts:AssumeRole
            Effect: Allow
            Principal:
              Service:
                - codebuild.amazonaws.com
      Path: /
      Policies:
        - PolicyName: AllowApplicationFramework
          PolicyDocument:
            Statement:
              - Sid: AllowServerlessFrameworkToDeploy
                Effect: Allow
                Resource:
                  Fn::Sub:
                    - 'arn:aws:s3:::${bucket}'
                    - bucket:
                        Fn::ImportValue: CodeArtifactsBucket
                Action:
                  - s3:GetBucketLocation