aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

CloudFormation Support for ServiceLinked roles. Support for IAM keys (iam:PassedToService)

Open
#991 0 comments 0 reactions 0 assignees View on GitHub
Coverage
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::IAM::Role

### Resource name

_No response_

### Description

When changing an identities capabilities, to only pass roles to CloudFormation, "iam:PassedToService" condition is not supported. Checking documentation Service linked roles are not yet supported by CloudFormation. The IAM key "iam:PassedToService" causes an error prompting that there is no identity based policy containing iam:PassRole when principal refers to cloudformation.

IAM: Pass an IAM role to a specific AWS service-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_iam-passrole-service.html

iam:passedtoservice-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_iam-condition-keys.html

Services that work with IAM-
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html#management_svcs

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the AWS::IAM::Role resource and the linked IAM documentation for iam:PassedToService, iam:PassRole, and service-linked roles. Since no repository files or tests are named, first identify the CloudFormation coverage and implementation entry points; done means CloudFormation supports the requested IAM condition key and service-linked roles without the reported policy error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.