title: In cloud formation how to associate Trusted entities with identity providers for an IAM role
body: <p>I am trying to create IAM roles which will be used by Azure AD to managed sso..</p>
  
  <p>I have create a cft with IAM Roles now i want the to be associated to only to Saml identity provider that i have created.</p>
  
  <pre><code>{
      "Resources": {
        "FullAdminXME": {
          "Type": "AWS::IAM::Role",
          "Properties": {
              "Description" : "SAML Role for Azure AD SSO",
              "AssumeRolePolicyDocument": {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Principal": {
                    "Service": [
                      "ec2.amazonaws.com"
                    ]
                  },
                  "Action": [
                    "sts:AssumeRole"
                  ]
                }
              ]
            },
            "ManagedPolicyArns": [
              "arn:aws:iam::aws:policy/AdministratorAccess"           
            ]
          }
        },
  </code></pre>
  
  <p>And also is there a way in which i can create saml identity provider using cloud formation.</p>
  
  <p><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml.html</a></p>
  
  <p>sample arn of an identity provider</p>
  
  <pre><code>
  arn:aws:iam::123456789012:saml-provider/MyUniversity&lt;/SAMLProviderArn&gt;
  
  </code></pre>
  
  <p>I only want to be bounded to to saml Identity provider.</p>
  
  <pre><code> "Statement": [
                {
                  "Effect": "Allow",
                  "Principal": {
                    "Service": [
                      "ec2.amazonaws.com"
                    ]
                  },
                  "Action": [
                    "sts:AssumeRole"
                  ]
                }
  </code></pre>