Policy: AWSProtonCodeBuildProvisioningServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSProtonCodeBuildProvisioningServiceRolePolicy Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:CreateStack cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStacks cloudformation cloudformation:ListStackResources cloudformation cloudformation:UpdateStack cloudformation codebuild:BatchGetBuilds codebuild codebuild:BatchGetProjects codebuild codebuild:CreateProject codebuild codebuild:DeleteProject codebuild codebuild:RetryBuild codebuild codebuild:StartBuild codebuild codebuild:StopBuild codebuild codebuild:UpdateProject codebuild iam:PassRole iam servicequotas:GetServiceQuota servicequotas