[ aws . cloudformation ]
Sets a stack policy for a specified stack.
See also: AWS API Documentation
See ‘aws help’ for descriptions of global parameters.
set-stack-policy
--stack-name <value>
[--stack-policy-body <value>]
[--stack-policy-url <value>]
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
--stack-name
(string)
The name or unique stack ID that you want to associate a policy with.
--stack-policy-body
(string)
Structure containing the stack policy body. For more information, go to Prevent Updates to Stack Resources in the AWS CloudFormation User Guide. You can specify either the
StackPolicyBody
or theStackPolicyURL
parameter, but not both.
--stack-policy-url
(string)
Location of a file containing the stack policy. The URL must point to a policy (maximum size: 16 KB) located in an S3 bucket in the same Region as the stack. You can specify either the
StackPolicyBody
or theStackPolicyURL
parameter, but not both.
--cli-input-json
| --cli-input-yaml
(string)
Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml
.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. Similarly, if provided yaml-input
it will print a sample input YAML that can be used with --cli-input-yaml
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
See ‘aws help’ for descriptions of global parameters.
To apply a stack policy
The following set-stack-policy
example disables updates for the specified resource in the specified stack. stack-policy.json
is a JSON document that defines the operations allowed on resources in the stack.
aws cloudformation set-stack-policy \
--stack-name my-stack \
--stack-policy-body file://stack-policy.json
Output:
{
"Statement" : [
{
"Effect" : "Allow",
"Action" : "Update:*",
"Principal": "*",
"Resource" : "*"
},
{
"Effect" : "Deny",
"Action" : "Update:*",
"Principal": "*",
"Resource" : "LogicalResourceId/bucket"
}
]
}
None