AWSTemplateFormatVersion: "2010-09-09" Description: Test bad ManagedPolicyArns setup Conditions: cPrimaryRegion: !Equals ['us-east-1', !Ref 'AWS::Region'] Resources: IamRole: Type: AWS::IAM::Role Properties: AssumeRolePolicyDocument: {} ManagedPolicyArns: - arn:aws:iam::aws:policy/AdministratorAccess - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess - arn:aws:iam::aws:policy/AdministratorAccess1 - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess1 - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess1 - !If [cPrimaryRegion, 'arn:aws:iam::aws:policy/IAMReadOnlyAccess', !Ref 'AWS::NoValue'] IamGroup: Type: AWS::IAM::Group Properties: ManagedPolicyArns: Fn::If: - cPrimaryRegion - - arn:aws:iam::aws:policy/AdministratorAccess - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess - arn:aws:iam::aws:policy/AdministratorAccess1 - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess1 - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess1 - - arn:aws:iam::aws:policy/AdministratorAccess - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess - arn:aws:iam::aws:policy/IAMReadOnlyAccess - arn:aws:iam::aws:policy/AdministratorAccess1 - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess1 - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess1 IamUser: Type: AWS::IAM::User Properties: ManagedPolicyArns: - arn:aws:iam::aws:policy/AdministratorAccess - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess - arn:aws:iam::aws:policy/IAMReadOnlyAccess - arn:aws:iam::aws:policy/AdministratorAccess1 - arn:aws:iam::aws:policy/AmazonEC2ReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonElastiCacheReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonKinesisReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess1 - arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess1 - arn:aws:iam::aws:policy/AutoScalingConsoleReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodeBuildReadOnlyAccess1 - arn:aws:iam::aws:policy/AWSCodePipelineReadOnlyAccess1