Verifying role configuration

Check that your invoker role is correctly configured using the following AWS CLI commands.

To verify that the role exists:

aws iam get-role --role-name AWSResilienceHubAssessmentRole

To verify the trust policy:

aws iam get-role --role-name AWSResilienceHubAssessmentRole \
  --query 'Role.AssumeRolePolicyDocument'

To simulate whether a principal can perform required actions:

aws iam simulate-principal-policy \
  --policy-source-arn arn:aws:iam::123456789012:role/AWSResilienceHubAssessmentRole \
  --action-names resiliencehub:GetService resiliencehub:StartFailureModeAssessment