Policy: AWSCodeDeployRoleForLambda ARN: arn:aws:iam::aws:policy/service-role/AWSCodeDeployRoleForLambda Allowed Actions Actions Services cloudwatch:DescribeAlarms cloudwatch lambda:GetAlias lambda lambda:GetProvisionedConcurrencyConfig lambda lambda:InvokeFunction lambda lambda:UpdateAlias lambda s3:GetObject s3 s3:GetObject s3 s3:GetObjectVersion s3 s3:GetObjectVersion s3 sns:Publish sns