Policy: AWSManagedServicesDeploymentToolkitPolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSManagedServicesDeploymentToolkitPolicy Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackResources cloudformation cloudformation:DescribeStacks cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:GetTemplate cloudformation cloudformation:GetTemplateSummary cloudformation cloudformation:TagResource cloudformation cloudformation:UntagResource cloudformation cloudformation:UpdateTerminationProtection cloudformation ecr:BatchGetRepositoryScanningConfiguration ecr ecr:CreateRepository ecr ecr:DeleteLifecyclePolicy ecr ecr:DeleteRepository ecr ecr:DeleteRepositoryPolicy ecr ecr:DescribeRepositories ecr ecr:GetLifecyclePolicy ecr ecr:ListTagsForResource ecr ecr:PutImageScanningConfiguration ecr ecr:PutImageTagMutability ecr ecr:PutLifecyclePolicy ecr ecr:SetRepositoryPolicy ecr ecr:TagResource ecr ecr:UntagResource ecr s3:CreateBucket s3 s3:DeleteBucket s3 s3:DeleteBucketPolicy s3 s3:DeleteObject s3 s3:DeleteObjectTagging s3 s3:DeleteObjectVersion s3 s3:DeleteObjectVersionTagging s3 s3:GetBucketLocation s3 s3:GetBucketLogging s3 s3:GetBucketPolicy s3 s3:GetBucketVersioning s3 s3:GetLifecycleConfiguration s3 s3:GetObject s3 s3:GetObjectAcl s3 s3:GetObjectAttributes s3 s3:GetObjectLegalHold s3 s3:GetObjectRetention s3 s3:GetObjectTagging s3 s3:GetObjectVersion s3 s3:GetObjectVersionAcl s3 s3:GetObjectVersionAttributes s3 s3:GetObjectVersionForReplication s3 s3:GetObjectVersionTagging s3 s3:GetObjectVersionTorrent s3 s3:ListBucket s3 s3:ListBucketVersions s3 s3:PutBucketAcl s3 s3:PutBucketLogging s3 s3:PutBucketObjectLockConfiguration s3 s3:PutBucketPolicy s3 s3:PutBucketPublicAccessBlock s3 s3:PutBucketTagging s3 s3:PutBucketVersioning s3 s3:PutEncryptionConfiguration s3 s3:PutLifecycleConfiguration s3