Skip to content

Instantly share code, notes, and snippets.

AWSTemplateFormatVersion: 2010-09-09
Resources:
ModuleVersion:
Type: 'AWS::CloudFormation::ModuleVersion'
Properties:
ModuleName: 'MYORG::SERVICENAME::PolicyV1::MODULE'
ModulePackage: 's3://<bucket-name>/<object-name>.zip'
@mf-contino
mf-contino / gist:336ace88fec67e1b5d4968435a2885e0
Last active February 15, 2021 11:07
cf-dynamodb-scan-policy-consumer
AWSTemplateFormatVersion: '2010–09–09'
Description: 'module client'
Resources:
ScannerRole:
Type: myorg::IAM::DynamoDBScannerPolicyV1::MODULE
Properties:
TableArn: arn:aws:dynamodb:us-east-1:123456789012:table/table1
NamePrefix: client
@mf-contino
mf-contino / gist:ac999057024242e2574dd7acad497efa
Created February 15, 2021 09:40
cf-dynamo-db-scan-policy
{
"AWSTemplateFormatVersion": "2010-09-09",
"Description": "An IAM Policy that only allows scan access to a specified DynamoDB table",
"Parameters": {
"TableArn": {
"Description": "ARN of the DynamoDB table to allow access to",
"Type": "String"
},
"NamePrefix": {
"Description": "Prefix to attach to the policy name",