cloudformation:ContinueUpdateRollback is a Write access-level action in the cloudformation service. Grants permission to continue rolling back a stack that is in the UPDATE_ROLLBACK_FAILED state to the UPDATE_ROLLBACK_COMPLETE state
ARNs that cloudformation:ContinueUpdateRollback can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants cloudformation:ContinueUpdateRollback.
Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets
Filters access by the tags associated with the resource
A minimal policy that allows cloudformation:ContinueUpdateRollback. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationContinueUpdateRollback",
"Effect": "Allow",
"Action": "cloudformation:ContinueUpdateRollback",
"Resource": "*"
}
]
}