Is there a way to modify AWS existing resource using cloudformation?-CodePudding

I'm trying to modify a trust relationship in an existing AWS IAM role. Is there a way to do that using cloudformation?

CodePudding user response：

You have to first import it to CFN and then you will be able to modify it. Alternatively, you can develop a custom resource which will allow you to do whatever you want (its custom after all).

CodePudding user response：

Adding to @Marcin 's response, once you've imported your resource to CFN, use the following documentation on performing CFN Stack Updates, specifically it is considered best practice (1) to update using CFN Change Sets method

(1) - https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#cfn-best-practices-changesets