Comment on page
Security Best Practices
IAM is an AWS service that you can use to manage users and their permissions in AWS.
Users require full access to manage all of the resources in a template.
AWS CloudFormation makes calls to create, modify, and delete those resources on their behalf. To separate permissions between a user and the AWS CloudFormation service, use a service role. AWS CloudFormation uses the service role's policy to make calls instead of the user's policy.
To deploy this product IAMRoleForStackCreation is required for the user
Last modified 2yr ago