Policy: AmplifyBackendDeployFullAccess ARN: arn:aws:iam::aws:policy/service-role/AmplifyBackendDeployFullAccess Allowed Actions Actions Services amplify:GetBackendEnvironment amplify amplify:ListApps amplify appsync:GetIntrospectionSchema appsync appsync:GetSchemaCreationStatus appsync appsync:ListFunctions appsync appsync:StartSchemaCreation appsync appsync:UpdateApiKey appsync appsync:UpdateFunction appsync appsync:UpdateResolver appsync cloudformation:DeleteStack cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStacks cloudformation cloudformation:GetTemplate cloudformation cloudformation:GetTemplateSummary cloudformation cloudformation:ListStackResources cloudformation cloudformation:ListStacks cloudformation ec2:DescribeSubnets ec2 lambda:GetFunction lambda lambda:InvokeFunction lambda lambda:ListTags lambda lambda:UpdateFunctionCode lambda lambda:UpdateFunctionConfiguration lambda logs:FilterLogEvents logs rds:DescribeDBClusters rds rds:DescribeDBInstances rds rds:DescribeDBProxies rds rds:DescribeDBSubnetGroups rds s3:GetObject s3 ssm:DeleteParameter ssm ssm:DeleteParameters ssm ssm:DescribeParameters ssm ssm:GetParameter ssm ssm:GetParameters ssm ssm:GetParametersByPath ssm ssm:PutParameter ssm sts:AssumeRole sts