Identity-based policies for CloudFormation
Consider the types of users who need access to AWS CloudFormation, and consider which actions those users need to perform in CloudFormation. You configure user permissions through identity-based policies, which you attach to an AWS Identity and Access Management (IAM) principal, such as a role or user.
When you configure an identity-based policy, the Effect
, Action
,
and Resource
elements are required. You can optionally define a
Condition
element too. For more information about these elements, see IAM JSON
policy elements reference.