user.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建RAM用户、用户组，附加预设策略至用户，将用户添加至组，输出用户与组详情。
  en: Create RAM users and user groups, attach pre-defined policies to users, add
    users to groups, and output detailed information of users and groups.
Parameters:
  UserName:
    Type: String
    Description: The maximum length is 64 characters, English letters, numbers, .,
      _ or - are allowed.
  GroupName:
    Type: String
    Description: The maximum length is 64 characters, English letters, numbers, .,
      _ or - are allowed.
Resources:
  User:
    Type: ALIYUN::RAM::User
    Properties:
      UserName:
        Ref: UserName
  Group:
    Type: ALIYUN::RAM::Group
    Properties:
      GroupName:
        Ref: GroupName
      Comments: test group
      Policies:
      - PolicyName:
          Fn::Sub: GroupPolicy-${ALIYUN::StackId}
        PolicyDocument:
          Version: '1'
          Statement:
          - Action:
            - oss:Get*
            Resource:
            - '*'
            Effect: Allow
  AttachPolicyToUser:
    Type: ALIYUN::RAM::AttachPolicyToUser
    Properties:
      PolicyType: System
      UserName:
        Fn::GetAtt:
        - User
        - UserName
      PolicyName: AliyunECSReadOnlyAccess
  UserToGroupAddition:
    Type: ALIYUN::RAM::UserToGroupAddition
    Properties:
      GroupName:
        Fn::GetAtt:
        - Group
        - GroupName
      Users:
      - Fn::GetAtt:
        - User
        - UserName
Outputs:
  GroupName:
    Value:
      Fn::GetAtt:
      - Group
      - GroupName
  UserName:
    Description: Name of ram user.
    Value:
      Fn::GetAtt:
      - User
      - UserName
  CreateDate:
    Description: Create date of ram user.
    Value:
      Fn::GetAtt:
      - User
      - CreateDate
  UserId:
    Description: Id of ram user.
    Value:
      Fn::GetAtt:
      - User
      - UserId
  LastLoginDate:
    Description: Last login date of ram user.
    Value:
      Fn::GetAtt:
      - User
      - LastLoginDate