nakada0907/daisuke-iam-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add CloudFormation write IAM role, managed policy, and repository README

Browse source
This commit is contained in:
Daisuke Nakahara 2025-12-31 19:52:14 +09:00
commit ef8bceff67
3 changed files with 111 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
README.md Normal file
View file

@ -0,0 +1,11 @@
# CloudFormation Write IAM Definitions
This repository defines IAM roles and policies for safely executing AWS CloudFormation operations via `AssumeRole`.
- `roles/cloudformation-write-role.yaml`
IAM role for CloudFormation execution, including ECR import permissions.
Assumable by specified IAM Identity Center roles.
- `policies/cloudformation-write-policy.yaml`
Managed policy granting minimal CloudFormation write access.
Intended for use via the execution role, not attached directly to users.