import pulumi_aws as aws

instance_assume_role_policy = aws.iam.get_policy_document(
    statements=[
        {
            'actions': ['sts:AssumeRole'],
            'principals': [
                {
                    'type': 'Service',
                    'identifiers': ['ec2.amazonaws.com'],
                }
            ],
        }
    ]
)

aws_region = aws.get_region().name

account_id = aws.get_caller_identity().account_id