Status: IN
CloudFormation users need permissions for both CloudFormation actions (e.g., `cloudformation:CreateStack`) AND permissions for the underlying AWS services referenced in templates (e.g., `sqs:*` for SQS queues).
Source: entries/2026/03/11/AWSCloudFormation-latest-UserGuide-control-access-with-iamhtml.md