cloudformation:RollbackStack is a Write access-level action in the cloudformation service. Grants permission to rollback the stack to the last stable state
ARNs that cloudformation:RollbackStack can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants cloudformation:RollbackStack.
Filters access by the ARN of an IAM service role. Use to control which service role IAM users can use to work with stacks or change sets
Filters access by the tags associated with the resource
A minimal policy that allows cloudformation:RollbackStack. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudformationRollbackStack",
"Effect": "Allow",
"Action": "cloudformation:RollbackStack",
"Resource": "*"
}
]
}