Capabilities that affect whether CloudFormation is allowed to change IAM resources.
|NONE||No IAM Capabilities.|
|ANONYMOUS_IAM||Capability to create anonymous IAM resources.|
|NAMED_IAM||Capability to create named IAM resources.|
|AUTO_EXPAND||Capability to run CloudFormation macros.|
No IAM Capabilities.
Pass this capability if you wish to block the creation IAM resources.
Capability to create anonymous IAM resources.
Pass this capability if you're only creating anonymous resources.
Capability to create named IAM resources.
Pass this capability if you're creating IAM resources that have physical names.
CloudFormationCapabilities.IAM; you don't have to pass both.