AWSTemplateFormatVersion: 2010-09-09 Description: "Test if IAM User is not assigned to a group" Resources: IAMUser: Type: AWS::IAM::User Properties: Groups: UserName: 'Bob'