cloudformation:CreateUploadBucket is a Write access-level action in the cloudformation service. Grants permission to upload templates to Amazon S3 buckets. Used only by the AWS CloudFormation console and is not documented in the API reference
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows cloudformation:CreateUploadBucket. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationCreateUploadBucket",
"Effect": "Allow",
"Action": "cloudformation:CreateUploadBucket",
"Resource": "*"
}
]
}