{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Parameters" : {
    "HubotRoleARNParameter": {
      "Type" : "String",
      "Description" : "Enter the role ARN of Hubot. For example: arn:aws:iam::107717073352:role/hubot_iam_role"
    }
  },
  "Resources": {
    "IAMRole": {
      "Type": "AWS::IAM::Role",
      "Properties": {
        "RoleName": "nilo-v1",
        "AssumeRolePolicyDocument": {
          "Statement": [
            {
              "Effect": "Allow",
              "Principal": {
                "AWS": [{
                  "Ref": "HubotRoleARNParameter"
                }]
              },
              "Action": [
                "sts:AssumeRole"
              ]
            }
          ]
        },
        "ManagedPolicyArns": ["arn:aws:iam::aws:policy/ReadOnlyAccess"]
      }
    }
  },
  "Outputs" : {
    "Role" : {
      "Description": "The ARN of the role we just created",
      "Value" : { "Fn::GetAtt" : [ "IAMRole", "Arn" ]}
    }
  }
}