Policy: AWSQuickSetupDeploymentRolePolicy ARN: arn:aws:iam::aws:policy/AWSQuickSetupDeploymentRolePolicy Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:CreateStack cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackDriftDetectionStatus cloudformation cloudformation:DescribeStackResourceDrifts cloudformation cloudformation:DescribeStacks cloudformation cloudformation:DetectStackDrift cloudformation cloudformation:DetectStackResourceDrift cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:ListStacks cloudformation cloudformation:UpdateStack cloudformation config:DeleteConformancePack config config:DescribeConformancePackStatus config config:DescribeConformancePacks config config:PutConformancePack config events:DeleteRule events events:DescribeRule events events:ListTargetsByRule events events:PutRule events events:PutTargets events events:RemoveTargets events iam:AttachRolePolicy iam iam:CreateRole iam iam:CreateServiceLinkedRole iam iam:CreateServiceLinkedRole iam iam:DeleteRole iam iam:DeleteRole iam iam:DeleteRolePolicy iam iam:DeleteRolePolicy iam iam:DetachRolePolicy iam iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListRolePolicies iam iam:ListRoleTags iam iam:PassRole iam iam:PutRolePermissionsBoundary iam iam:PutRolePolicy iam iam:TagRole iam iam:UntagRole iam iam:UpdateRole iam resource-groups:GetGroupQuery resource-groups ssm:AddTagsToResource ssm ssm:CreateAssociation ssm ssm:CreateDocument ssm ssm:DeleteAssociation ssm ssm:DeleteDocument ssm ssm:DeleteDocument ssm ssm:DescribeAssociation ssm ssm:DescribeDocument ssm ssm:GetDocument ssm ssm:ListTagsForResource ssm ssm:RemoveTagsFromResource ssm ssm:UpdateAssociation ssm ssm:UpdateDocument ssm ssm:UpdateDocumentDefaultVersion ssm