AWSTemplateFormatVersion: 2010-09-09 Description: "Test for if IAM Policy has * Resources with PassRole Action" Resources: IAMPolicy: Type: 'AWS::IAM::Policy' Properties: PolicyName: CFNTestResourceWildcardPassRole PolicyDocument: Version: "2012-10-17" Statement: - Effect: Allow Action: 'iam:PassRole' Resource: '*'