Stack Policies

Just like we restrict different users’ actions on different resources through IAM policies, we can also configure stack policies to define permissible actions on the CloudFormation stack resources.

Managing stack workflows with policies

We can define a stack policy as a JSON document that defines the permissible and impermissible actions that can be applied to the CloudFormation stack resources.