CfnCapabilities¶

class aws_cdk.core.CfnCapabilities(value)¶

Bases: enum.Enum

Capabilities that affect whether CloudFormation is allowed to change IAM resources.

Attributes

ANONYMOUS_IAM¶

Capability to create anonymous IAM resources.

Pass this capability if you’re only creating anonymous resources.

Link: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities

AUTO_EXPAND¶

Capability to run CloudFormation macros.

Pass this capability if your template includes macros, for example AWS::Include or AWS::Serverless.

Link: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStack.html

NAMED_IAM¶

Capability to create named IAM resources.

Pass this capability if you’re creating IAM resources that have physical names.

CloudFormationCapabilities.NamedIAM implies CloudFormationCapabilities.IAM; you don’t have to pass both.

Link: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities

NONE¶

No IAM Capabilities.

Pass this capability if you wish to block the creation IAM resources.

Link: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities