{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "BreakGlass",
            "Effect": "Allow",
            "Action": [
                "sts:AssumeRole"
            ],
            "Resource": "BREAK_GLASS_ROLE_ARN",
            "Condition": {
              "DateLessThan": {
                "aws:CurrentTime": "FIFTEEN_MINUTES_FROM_NOW"
              },
              "Bool": {
                "aws:MultiFactorAuthPresent": "true"
              },
              "StringLike": {
                "sts:RoleSessionName": "${aws:username}"
              }
            }
        }
    ]
}