More fine-grained tuning of CF create/update-stack
eltonlaw opened this issue · 0 comments
eltonlaw commented
At the moment, create/update just always pass in capabilities for creating IAM resources. Not a security concern but it would probably be more correct to have it passed in only for the stacks that need it.