aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
CloudFormation Support for ServiceLinked roles. Support for IAM keys (iam:PassedToService)
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::IAM::Role
### Resource name
_No response_
### Description
When changing an identities capabilities, to only pass roles to CloudFormation, "iam:PassedToService" condition is not supported. Checking documentation Service linked roles are not yet supported by CloudFormation. The IAM key "iam:PassedToService" causes an error prompting that there is no identity based policy containing iam:PassRole when principal refers to cloudformation.
IAM: Pass an IAM role to a specific AWS service-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_iam-passrole-service.html
iam:passedtoservice-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html
Services that work with IAM-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html#management_svcs
### Other Details
_No response_
Contributor guide
Research direction
Start by reviewing the AWS::IAM::Role resource and the linked IAM documentation for iam:PassedToService, iam:PassRole, and service-linked roles. Since no repository files or tests are named, first identify the CloudFormation coverage and implementation entry points; done means CloudFormation supports the requested IAM condition key and service-linked roles without the reported policy error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100