Policy: AWSCodeStarServiceRole ARN: arn:aws:iam::aws:policy/service-role/AWSCodeStarServiceRole Allowed Actions Actions Services autoscaling:* autoscaling cloud9:CreateEnvironmentEC2 cloud9 cloud9:DeleteEnvironment cloud9 cloud9:DescribeEnvironment* cloud9 cloud9:ListEnvironments cloud9 cloudformation:Stack cloudformation cloudformation:CreateChangeSet cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:GetTemplate cloudformation cloudformation:GetTemplateSummary cloudformation cloudwatch:Put* cloudwatch codebuild:* codebuild codecommit:* codecommit codedeploy:* codedeploy codepipeline:* codepipeline codestar:* codestar codestar-connections:GetConnection codestar-connections codestar-connections:PassConnection codestar-connections codestar-connections:UseConnection codestar-connections config:DescribeConfigRules config ec2:* ec2 elasticbeanstalk:* elasticbeanstalk elasticloadbalancing:* elasticloadbalancing events:DeleteRule events events:DescribeRule events events:PutRule events events:PutTargets events events:RemoveTargets events iam:AddRoleToInstanceProfile iam iam:AttachRolePolicy iam iam:AttachUserPolicy iam iam:CreateInstanceProfile iam iam:CreatePolicy iam iam:CreatePolicy iam iam:CreatePolicyVersion iam iam:CreateRole iam iam:CreateServiceLinkedRole iam iam:DeleteInstanceProfile iam iam:DeletePolicy iam iam:DeletePolicy iam iam:DeletePolicyVersion iam iam:DeleteRole iam iam:DeleteRolePolicy iam iam:DetachRolePolicy iam iam:DetachUserPolicy iam iam:GetPolicy iam iam:GetPolicyVersion iam iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListEntitiesForPolicy iam iam:ListPolicyVersions iam iam:ListRoles iam iam:PassRole iam iam:PutRolePolicy iam iam:RemoveRoleFromInstanceProfile iam iam:SetDefaultPolicyVersion iam logs:* logs s3:* s3 s3:GetObject s3 sns:* sns