AWS cloudformation user creation with programmatic access and s3 policy

cloudformation.yml

AWSTemplateFormatVersion: '2010-09-09'

Resources:
  # Setup an user
  user:
    Type: AWS::IAM::User
    Properties:
      UserName: !Join
        - '-'
        - - 'changeme'
          - !Ref 'AWS::Region'
      Policies:
      - PolicyName: bucket-access
        PolicyDocument:
          Version: '2012-10-17'
          Statement:
          - Effect: Allow
            Action:
            - s3:GetObject
            Resource: arn:aws:s3:::/*
  userAccesskey:
    Type: AWS::IAM::AccessKey
    Properties:
      UserName:
        !Ref user

Outputs:
  AccessKeyUser:
    Value:
      !Ref userAccesskey
      # will print first time on output variables the password.
  SecretKeyUser:
    Value: !GetAtt userAccesskey.SecretAccessKey