cloudformation:ActivateOrganizationsAccess is a Write access-level action in the cloudformation service. Grants permission to activate trusted access between StackSets and Organizations. With trusted access between StackSets and Organizations activated, the management account has permissions to create and manage StackSets for your organization
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows cloudformation:ActivateOrganizationsAccess. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationActivateOrganizationsAccess",
"Effect": "Allow",
"Action": "cloudformation:ActivateOrganizationsAccess",
"Resource": "*"
}
]
}