cloudformation:DescribeStacks

List

cloudformation:DescribeStacks is a List access-level action in the cloudformation service. Grants permission to return the description for the specified stack, and to all stacks when used in combination with the ListStacks action

Resource types

ARNs that cloudformation:DescribeStacks can be scoped to in an IAM policy.

arn:${Partition}:cloudformation:${Region}:${Account}:stack/${StackName}/${Id}
stack

Condition keys

Keys you can use in the Condition block of a policy that grants cloudformation:DescribeStacks.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

Dependent actions

To use cloudformation:DescribeStacks you may also need to grant:

Example IAM policy

A minimal policy that allows cloudformation:DescribeStacks. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCloudformationDescribeStacks",
      "Effect": "Allow",
      "Action": "cloudformation:DescribeStacks",
      "Resource": "*"
    }
  ]
}

Related actions in cloudformation

cloudformation:ActivateOrganizationsAccess Write cloudformation:ActivateType Write cloudformation:BatchDescribeTypeConfigurations Read cloudformation:CancelResourceRequest Write cloudformation:CancelUpdateStack Write cloudformation:ContinueUpdateRollback Write cloudformation:CreateChangeSet Write cloudformation:CreateGeneratedTemplate Write cloudformation:CreateResource Write cloudformation:CreateStack Write cloudformation:CreateStackInstances Write cloudformation:CreateStackRefactor Write

View all cloudformation actions →