Identity-based policies for CloudFormation - AWS Prescriptive Guidance

Identity-based policies for CloudFormation

Consider the types of users who need access to AWS CloudFormation, and consider which actions those users need to perform in CloudFormation. You configure user permissions through identity-based policies, which you attach to an AWS Identity and Access Management (IAM) principal, such as a role or user.

When you configure an identity-based policy, the Effect, Action, and Resource elements are required. You can optionally define a Condition element too. For more information about these elements, see IAM JSON policy elements reference.