{"id":"cfn-dual-layer-permissions-required","text":"CloudFormation users need permissions for both CloudFormation actions (e.g., `cloudformation:CreateStack`) AND permissions for the underlying AWS services referenced in templates (e.g., `sqs:*` for SQS queues).","truth_value":"IN","source":"entries/2026/03/11/AWSCloudFormation-latest-UserGuide-control-access-with-iamhtml.md","source_url":"","source_hash":"7e4e2f9997122a85","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cfn-dual-layer-permissions-required","truth_value":"IN","reason":"premise"}]}}