cloudformation:CreateStackSet is a Write access-level action in the cloudformation service. Grants permission to create a stackset as specified in the template
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants cloudformation:CreateStackSet.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets
Filters access by an Amazon S3 template URL. Use to control which templates IAM users can use when they create or update stacks
A minimal policy that allows cloudformation:CreateStackSet. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationCreateStackSet",
"Effect": "Allow",
"Action": "cloudformation:CreateStackSet",
"Resource": "*"
}
]
}