Resources

AWS CloudFormation documentation

• Controlling access with AWS Identity and Access Management

• AWS resource and property types reference

• Setting AWS CloudFormation stack options

• AWS CloudFormation service role

AWS Identity and Access Management (IAM) documentation

• Policies and permissions in IAM

• IAM JSON policy elements reference

• Policy evaluation logic

• AWS services that work with IAM

• Creating a role to delegate permissions to an AWS service

• The confused deputy problem

• Security best practices in IAM

Other AWS references

• Actions, resources, and condition keys for AWS services (Service Authorization Reference)

• Grant least privilege access (AWS Well-Architected Framework)

• Techniques for writing least privilege IAM policies (AWS blog post)