Appearance
runner.ensure_iam_instance_profile ​
Idempotently ensure an IAM role, its managed-policy attachments, and an instance profile (with the role added) exist for runner EC2 instances.
Idempotently ensure an IAM role + instance profile exist via base atomics.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Linear |
| Library | App-runners-aws |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
connection_uuid | uuid | Yes | — | UUID of the CloudConnection used to run the underlying aws.iam.* primitives, picked from the organization's AWS connections. |
role_name | string | Yes | — | — |
profile_name | string | Yes | — | — |
assume_role_policy | json | Yes | — | — |
managed_policy_arns | list | No | — | — |
role_description | string | No | — | — |
tags | json | No | — | — |
organization_uuid | uuid | No | — | UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant. |
region | string | No | — | — |
workflow_run_id | string | No | — | — |
workflow_run_uuid | string | No | — | Legacy alias of workflow_run_id for DAG-step correlation; engine-generated, not a user-facing picker. |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
connection_uuid | uuid | No | — | UUID of the CloudConnection used to run the underlying aws.iam.* primitives, echoed back from the input on output. Optional here because this is an output-only echo. |
profile_arn | string | No | — | — |
profile_name | string | No | — | — |
role_arn | string | No | — | — |
role_name | string | No | — | — |
attached_policy_arns | json | No | — | — |
completed_at | string | No | — | — |
failed_at | string | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
failed_layer | string | No | — | — |
failed_step | string | No | — | — |
error | string | No | — | — |
error_type | string | No | — | — |
reason | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | execute | — |
ensuring | No | No | — | complete | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | execute | ensuring | — |
ensuring | complete | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "runner.ensure_iam_instance_profile",
"initial_data": {
"connection_uuid": "value",
"role_name": "value",
"profile_name": "value",
"assume_role_policy": "value"
}
}