diff --git a/modules/l1/l1-iam-role/manifest.yaml b/modules/l1/l1-iam-role/manifest.yaml
new file mode 100644
index 0000000..13ea521
--- /dev/null
+++ b/modules/l1/l1-iam-role/manifest.yaml
@@ -0,0 +1,10 @@
+name: l1-iam-role
+kind: l1
+description: Identity and access role primitive
+inputs:
+  role_name:
+    description: Name of the IAM role to create
+    type: string
+  trust_policy:
+    description: JSON trust policy document defining who can assume the role
+    type: string
\ No newline at end of file
diff --git a/modules/l1/l1-iam-role/mock_apply.sh b/modules/l1/l1-iam-role/mock_apply.sh
new file mode 100755
index 0000000..fe48862
--- /dev/null
+++ b/modules/l1/l1-iam-role/mock_apply.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+echo "[L1: l1-iam-role] applying..."
+sleep 1
+echo "[L1: l1-iam-role] OK"
+exit 0
\ No newline at end of file