Skip to content

Service: cloudformation

Attached Policies

Policy ARN Policy Name
arn:aws:iam::aws:policy/ReadOnlyAccess ReadOnlyAccess
arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess AWSCloudFormationReadOnlyAccess
arn:aws:iam::aws:policy/ResourceGroupsandTagEditorFullAccess ResourceGroupsandTagEditorFullAccess
arn:aws:iam::aws:policy/ResourceGroupsandTagEditorReadOnlyAccess ResourceGroupsandTagEditorReadOnlyAccess
arn:aws:iam::aws:policy/AmazonElasticMapReduceFullAccess AmazonElasticMapReduceFullAccess
arn:aws:iam::aws:policy/SecurityAudit SecurityAudit
arn:aws:iam::aws:policy/AWSMarketplaceFullAccess AWSMarketplaceFullAccess
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkService AWSElasticBeanstalkService
arn:aws:iam::aws:policy/job-function/ViewOnlyAccess ViewOnlyAccess
arn:aws:iam::aws:policy/job-function/SupportUser SupportUser
arn:aws:iam::aws:policy/job-function/DataScientist DataScientist
arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole AWSOpsWorksCMInstanceProfileRole
arn:aws:iam::aws:policy/service-role/AWSOpsWorksCMServiceRole AWSOpsWorksCMServiceRole
arn:aws:iam::aws:policy/service-role/AmazonSSMAutomationRole AmazonSSMAutomationRole
arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole AWSCodeStarServiceRole
arn:aws:iam::aws:policy/AWSCodeStarFullAccess AWSCodeStarFullAccess
arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess AWSGlueConsoleFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkServiceRolePolicy AWSElasticBeanstalkServiceRolePolicy
arn:aws:iam::aws:policy/AmazonECS_FullAccess AmazonECS_FullAccess
arn:aws:iam::aws:policy/aws-service-role/AmazonSSMServiceRolePolicy AmazonSSMServiceRolePolicy
arn:aws:iam::aws:policy/AmazonMQFullAccess AmazonMQFullAccess
arn:aws:iam::aws:policy/AmazonSageMakerFullAccess AmazonSageMakerFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSCloud9ServiceRolePolicy AWSCloud9ServiceRolePolicy
arn:aws:iam::aws:policy/AWSServiceCatalogAdminFullAccess AWSServiceCatalogAdminFullAccess
arn:aws:iam::aws:policy/AWSServiceCatalogEndUserFullAccess AWSServiceCatalogEndUserFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSTrustedAdvisorServiceRolePolicy AWSTrustedAdvisorServiceRolePolicy
arn:aws:iam::aws:policy/AWSResourceGroupsReadOnlyAccess AWSResourceGroupsReadOnlyAccess
arn:aws:iam::aws:policy/SecretsManagerReadWrite SecretsManagerReadWrite
arn:aws:iam::aws:policy/aws-service-role/AWSConfigServiceRolePolicy AWSConfigServiceRolePolicy
arn:aws:iam::aws:policy/AWSGlueConsoleSageMakerNotebookFullAccess AWSGlueConsoleSageMakerNotebookFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerMasterAccountRolePolicy AWSLicenseManagerMasterAccountRolePolicy
arn:aws:iam::aws:policy/service-role/ServerMigrationServiceLaunchRole ServerMigrationServiceLaunchRole
arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForBackup AWSBackupServiceRolePolicyForBackup
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkMaintenance AWSElasticBeanstalkMaintenance
arn:aws:iam::aws:policy/service-role/AWSBackupServiceRolePolicyForRestores AWSBackupServiceRolePolicyForRestores
arn:aws:iam::aws:policy/service-role/AWSDeepRacerServiceRolePolicy AWSDeepRacerServiceRolePolicy
arn:aws:iam::aws:policy/AWSDeepRacerCloudFormationAccessPolicy AWSDeepRacerCloudFormationAccessPolicy
arn:aws:iam::aws:policy/AWSAppMeshFullAccess AWSAppMeshFullAccess
arn:aws:iam::aws:policy/AWSAppMeshReadOnly AWSAppMeshReadOnly
arn:aws:iam::aws:policy/service-role/AWSControlTowerServiceRolePolicy AWSControlTowerServiceRolePolicy
arn:aws:iam::aws:policy/ServiceQuotasReadOnlyAccess ServiceQuotasReadOnlyAccess
arn:aws:iam::aws:policy/ServiceQuotasFullAccess ServiceQuotasFullAccess
arn:aws:iam::aws:policy/aws-service-role/ConfigConformsServiceRolePolicy ConfigConformsServiceRolePolicy
arn:aws:iam::aws:policy/AWSCloudFormationFullAccess AWSCloudFormationFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForSMS AWSServiceRoleForSMS
arn:aws:iam::aws:policy/AWSServiceCatalogEndUserReadOnlyAccess AWSServiceCatalogEndUserReadOnlyAccess
arn:aws:iam::aws:policy/AWSServiceCatalogAdminReadOnlyAccess AWSServiceCatalogAdminReadOnlyAccess
arn:aws:iam::aws:policy/AWSForWordPressPluginPolicy AWSForWordPressPluginPolicy
arn:aws:iam::aws:policy/AmazonEC2RolePolicyForLaunchWizard AmazonEC2RolePolicyForLaunchWizard
arn:aws:iam::aws:policy/AWSBackupFullAccess AWSBackupFullAccess
arn:aws:iam::aws:policy/AWSBackupOperatorAccess AWSBackupOperatorAccess
arn:aws:iam::aws:policy/aws-service-role/AWSElasticBeanstalkManagedUpdatesServiceRolePolicy AWSElasticBeanstalkManagedUpdatesServiceRolePolicy
arn:aws:iam::aws:policy/ServerMigrationServiceConsoleFullAccess ServerMigrationServiceConsoleFullAccess
arn:aws:iam::aws:policy/AWSThinkboxDeadlineResourceTrackerAdminPolicy AWSThinkboxDeadlineResourceTrackerAdminPolicy
arn:aws:iam::aws:policy/AWSThinkboxAWSPortalAdminPolicy AWSThinkboxAWSPortalAdminPolicy
arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup AWSBackupServiceLinkedRolePolicyForBackup
arn:aws:iam::aws:policy/service-role/AWSElasticBeanstalkRoleCore AWSElasticBeanstalkRoleCore
arn:aws:iam::aws:policy/AWSCodePipeline_FullAccess AWSCodePipeline_FullAccess
arn:aws:iam::aws:policy/service-role/AWS_ConfigRole AWS_ConfigRole
arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy AWSSupportServiceRolePolicy
arn:aws:iam::aws:policy/AWSServiceCatalogAppRegistryFullAccess AWSServiceCatalogAppRegistryFullAccess
arn:aws:iam::aws:policy/AWSLambda_ReadOnlyAccess AWSLambda_ReadOnlyAccess
arn:aws:iam::aws:policy/AWSLambda_FullAccess AWSLambda_FullAccess
arn:aws:iam::aws:policy/AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AmazonDevOpsGuruServiceRolePolicy AmazonDevOpsGuruServiceRolePolicy
arn:aws:iam::aws:policy/AmazonDevOpsGuruReadOnlyAccess AmazonDevOpsGuruReadOnlyAccess
arn:aws:iam::aws:policy/AmazonDevOpsGuruFullAccess AmazonDevOpsGuruFullAccess
arn:aws:iam::aws:policy/AdministratorAccess-Amplify AdministratorAccess-Amplify
arn:aws:iam::aws:policy/AWSElasticBeanstalkReadOnly AWSElasticBeanstalkReadOnly
arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk AdministratorAccess-AWSElasticBeanstalk
arn:aws:iam::aws:policy/AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceCatalogAppRegistryServiceRolePolicy AWSServiceCatalogAppRegistryServiceRolePolicy
arn:aws:iam::aws:policy/AWSElasticDisasterRecoveryConsoleFullAccess AWSElasticDisasterRecoveryConsoleFullAccess
arn:aws:iam::aws:policy/AWSMigrationHubRefactorSpacesFullAccess AWSMigrationHubRefactorSpacesFullAccess
arn:aws:iam::aws:policy/AmazonDevOpsGuruConsoleFullAccess AmazonDevOpsGuruConsoleFullAccess
arn:aws:iam::aws:policy/service-role/AmazonSageMakerServiceCatalogProductsCodePipelineServiceRolePolicy AmazonSageMakerServiceCatalogProductsCodePipelineServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServicesDeploymentToolkitPolicy AWSManagedServicesDeploymentToolkitPolicy
arn:aws:iam::aws:policy/AWSRefactoringToolkitFullAccess AWSRefactoringToolkitFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSResourceExplorerServiceRolePolicy AWSResourceExplorerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSProtonCodeBuildProvisioningServiceRolePolicy AWSProtonCodeBuildProvisioningServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSServiceCatalogSyncServiceRolePolicy AWSServiceCatalogSyncServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSReachabilityAnalyzerServiceRolePolicy AWSReachabilityAnalyzerServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy
arn:aws:iam::aws:policy/aws-service-role/ResourceGroupsServiceRolePolicy ResourceGroupsServiceRolePolicy
arn:aws:iam::aws:policy/AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccess AWSMigrationHubRefactorSpaces-EnvironmentsWithoutBridgesFullAccess
arn:aws:iam::aws:policy/aws-service-role/AWSWellArchitectedDiscoveryServiceRolePolicy AWSWellArchitectedDiscoveryServiceRolePolicy
arn:aws:iam::aws:policy/AWSResilienceHubAsssessmentExecutionPolicy AWSResilienceHubAsssessmentExecutionPolicy
arn:aws:iam::aws:policy/AmazonLaunchWizardFullAccessV2 AmazonLaunchWizardFullAccessV2
arn:aws:iam::aws:policy/AmazonDataZoneRedshiftGlueProvisioningPolicy AmazonDataZoneRedshiftGlueProvisioningPolicy
arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess AmplifyBackendDeployFullAccess
arn:aws:iam::aws:policy/AWSIncidentManagerIncidentAccessServiceRolePolicy AWSIncidentManagerIncidentAccessServiceRolePolicy
arn:aws:iam::aws:policy/AWSElasticDisasterRecoveryConsoleFullAccess_v2 AWSElasticDisasterRecoveryConsoleFullAccess_v2
arn:aws:iam::aws:policy/AmazonQFullAccess AmazonQFullAccess
arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
arn:aws:iam::aws:policy/aws-service-role/SSMQuickSetupRolePolicy SSMQuickSetupRolePolicy
arn:aws:iam::aws:policy/AWSQuickSetupDevOpsGuruPermissionsBoundary AWSQuickSetupDevOpsGuruPermissionsBoundary
arn:aws:iam::aws:policy/AWSQuickSetupDeploymentRolePolicy AWSQuickSetupDeploymentRolePolicy
arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyDeploymentRolePolicy AWSQuickSetupPatchPolicyDeploymentRolePolicy
arn:aws:iam::aws:policy/AmazonQDeveloperAccess AmazonQDeveloperAccess
arn:aws:iam::aws:policy/AWSQuickSetupSSMDeploymentRolePolicy AWSQuickSetupSSMDeploymentRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePermissionsBoundary SageMakerStudioProjectUserRolePermissionsBoundary
arn:aws:iam::aws:policy/service-role/SageMakerStudioProjectProvisioningRolePolicy SageMakerStudioProjectProvisioningRolePolicy
arn:aws:iam::aws:policy/SageMakerStudioProjectUserRolePolicy SageMakerStudioProjectUserRolePolicy
arn:aws:iam::aws:policy/AWSPartnerLedSupportReadOnlyAccess AWSPartnerLedSupportReadOnlyAccess
arn:aws:iam::aws:policy/AIOpsAssistantPolicy AIOpsAssistantPolicy
arn:aws:iam::aws:policy/AWSQuickSetupJITNADeploymentRolePolicy AWSQuickSetupJITNADeploymentRolePolicy

Allowed Actions

Action Service
cloudformation:* cloudformation
cloudformation:Stack cloudformation
cloudformation:ActivateType cloudformation
cloudformation:CancelUpdateStack cloudformation
cloudformation:ContinueUpdateRollback cloudformation
cloudformation:CreateChangeSet cloudformation
cloudformation:CreateStack cloudformation
cloudformation:CreateStackInstances cloudformation
cloudformation:CreateStackSet cloudformation
cloudformation:CreateUploadBucket cloudformation
cloudformation:DeactivateType cloudformation
cloudformation:DeleteChangeSet cloudformation
cloudformation:DeleteStack cloudformation
cloudformation:DeleteStackInstances cloudformation
cloudformation:DeleteStackSet cloudformation
cloudformation:Describe* cloudformation
cloudformation:DescribeAccountLimits cloudformation
cloudformation:DescribeChangeSet cloudformation
cloudformation:DescribeStack* cloudformation
cloudformation:DescribeStackDriftDetectionStatus cloudformation
cloudformation:DescribeStackEvents cloudformation
cloudformation:DescribeStackInstance cloudformation
cloudformation:DescribeStackResource cloudformation
cloudformation:DescribeStackResourceDrifts cloudformation
cloudformation:DescribeStackResources cloudformation
cloudformation:DescribeStackSet cloudformation
cloudformation:DescribeStackSetOperation cloudformation
cloudformation:DescribeStacks cloudformation
cloudformation:DescribeType cloudformation
cloudformation:Detect* cloudformation
cloudformation:DetectStackDrift cloudformation
cloudformation:DetectStackResourceDrift cloudformation
cloudformation:Estimate* cloudformation
cloudformation:EstimateTemplateCost cloudformation
cloudformation:ExecuteChangeSet cloudformation
cloudformation:Get* cloudformation
cloudformation:GetResource cloudformation
cloudformation:GetStackPolicy cloudformation
cloudformation:GetTemplate cloudformation
cloudformation:GetTemplateSummary cloudformation
cloudformation:List* cloudformation
cloudformation:ListChangeSets cloudformation
cloudformation:ListImports cloudformation
cloudformation:ListResources cloudformation
cloudformation:ListStack* cloudformation
cloudformation:ListStackInstances cloudformation
cloudformation:ListStackResources cloudformation
cloudformation:ListStackSetOperationResults cloudformation
cloudformation:ListStackSetOperations cloudformation
cloudformation:ListStackSets cloudformation
cloudformation:ListStacks cloudformation
cloudformation:ListStacks* cloudformation
cloudformation:ListTypes cloudformation
cloudformation:SetStackPolicy cloudformation
cloudformation:SetTypeConfiguration cloudformation
cloudformation:SignalResource cloudformation
cloudformation:TagResource cloudformation
cloudformation:UntagResource cloudformation
cloudformation:UpdateStack cloudformation
cloudformation:UpdateStackInstances cloudformation
cloudformation:UpdateStackSet cloudformation
cloudformation:UpdateTermination* cloudformation
cloudformation:UpdateTerminationProtection cloudformation
cloudformation:Validate* cloudformation
cloudformation:ValidateTemplate cloudformation
cloudformation:batchDescribeTypeConfigurations cloudformation
cloudformation:describeAccountLimits cloudformation
cloudformation:describeChangeSet cloudformation
cloudformation:describeChangeSetHooks cloudformation
cloudformation:describePublisher cloudformation
cloudformation:describeStackEvents cloudformation
cloudformation:describeStackInstance cloudformation
cloudformation:describeStackResource cloudformation
cloudformation:describeStackResources cloudformation
cloudformation:describeStackSet cloudformation
cloudformation:describeStackSetOperation cloudformation
cloudformation:describeStacks cloudformation
cloudformation:describeType cloudformation
cloudformation:describeTypeRegistration cloudformation
cloudformation:estimateTemplateCost cloudformation
cloudformation:getStackPolicy cloudformation
cloudformation:getTemplate cloudformation
cloudformation:getTemplateSummary cloudformation
cloudformation:listChangeSets cloudformation
cloudformation:listExports cloudformation
cloudformation:listImports cloudformation
cloudformation:listStackInstances cloudformation
cloudformation:listStackResources cloudformation
cloudformation:listStackSetOperationResults cloudformation
cloudformation:listStackSetOperations cloudformation
cloudformation:listStackSets cloudformation
cloudformation:listStacks cloudformation
cloudformation:listTypeRegistrations cloudformation
cloudformation:listTypeVersions cloudformation
cloudformation:listTypes cloudformation