lightsail:GetCloudFormationStackRecords is a Read access-level action in the lightsail service. Grants permission to get information about all CloudFormation stacks used to create Amazon EC2 resources from exported Amazon Lightsail snapshots
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows lightsail:GetCloudFormationStackRecords. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowLightsailGetCloudFormationStackRecords",
"Effect": "Allow",
"Action": "lightsail:GetCloudFormationStackRecords",
"Resource": "*"
}
]
}