CfnCapabilities

class aws_cdk.core.CfnCapabilities(value)

Bases: Enum

Capabilities that affect whether CloudFormation is allowed to change IAM resources.

Attributes

ANONYMOUS_IAM

Capability to create anonymous IAM resources.

Pass this capability if you’re only creating anonymous resources.

Link:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities

AUTO_EXPAND

Capability to run CloudFormation macros.

Pass this capability if your template includes macros, for example AWS::Include or AWS::Serverless.

Link:

https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStack.html

NAMED_IAM

Capability to create named IAM resources.

Pass this capability if you’re creating IAM resources that have physical names.

CloudFormationCapabilities.NamedIAM implies CloudFormationCapabilities.IAM; you don’t have to pass both.

Link:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities

NONE

No IAM Capabilities.

Pass this capability if you wish to block the creation IAM resources.

Link:

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities