CloudFormation Access Control
- Use IAM to control access to resources
- For IAM
- create group or IAM user in AWS account
- associate IAM policy with that group or user
- specify permissions to grant
- Access to all resources by the * wildcard for the Resource element.
- IAM role enables CloudFormation to
- create stack resources
- update stack resources
- delete stack resources
