AWSTemplateFormatVersion: 2010-09-09
Description: "Test for if IAM Policy explicitly mentions users"
Resources:
  IAMManagedPolicy:
    Type: 'AWS::IAM::ManagedPolicy'
    Properties:
      PolicyName: CFNTestManagedOnlyGroup
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
      Groups:
           - ""
      Users:
        - "Bob"