Enum cloudformatious::Capability [−][src]
pub enum Capability { Iam, NamedIam, AutoExpand, }
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to create (or update) the stack.
-
CAPABILITY_IAM
andCAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either
CAPABILITY_IAM
orCAPABILITY_NAMES_IAM
capability.- If you have IAM resources, you can specify either capability.
- If you have IAM resources with custom names, you must specify
CAPABILITY_NAMED_IAM
. - If you don’t specify either of these capabilities, AWS CloudFormation returns an
InsufficientCapabilities
error.
If you stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
AWS::IAM::AccessKey
AWS::IAM::Group
AWS::IAM::InstanceProfile
AWS::IAM::Policy
AWS::IAM::Role
AWS::IAM::User
AWS::IAM::UserToGroupAddition
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
-
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the
AWS::Include
andAWS::Serverless
transforms, which are macros hosted by AWS CloudFormation.This capacity does not apply to creating change sets, and specifying it when creating change sets has no effect.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create or update the stack directly from the template using the
CreateStack
orUpdateStack
action, and specifying this capability.For more information on macros, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
Variants
Acknowledge IAM resources (without custom names only).
Acknowledge IAM resources (with or without custom names).
Acknowledge macro expansion.
Trait Implementations
impl Clone for Capability
[src]
impl Clone for Capability
[src]fn clone(&self) -> Capability
[src]
pub fn clone_from(&mut self, source: &Self)
1.0.0[src]
impl Copy for Capability
[src]
impl Copy for Capability
[src]impl Serialize for Capability
[src]
impl Serialize for Capability
[src]Auto Trait Implementations
impl RefUnwindSafe for Capability
impl RefUnwindSafe for Capability
impl Send for Capability
impl Send for Capability
impl Sync for Capability
impl Sync for Capability
impl Unpin for Capability
impl Unpin for Capability
impl UnwindSafe for Capability
impl UnwindSafe for Capability
Blanket Implementations
impl<T> Instrument for T
[src]
impl<T> Instrument for T
[src]pub fn instrument(self, span: Span) -> Instrumented<Self>
[src]
pub fn in_current_span(self) -> Instrumented<Self>
[src]
impl<T> Same<T> for T
impl<T> Same<T> for T
type Output = T
Should always be Self