mapUsers: |
- userarn: arn:aws:iam::AWSAccountID:user/IAMUserName
      username: IAMUserName
      groups:
        - Readonly-Group