Policy: AWSQuickSetupPatchPolicyDeploymentRolePolicy ARN: arn:aws:iam::aws:policy/AWSQuickSetupPatchPolicyDeploymentRolePolicy Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:CreateStack cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackDriftDetectionStatus cloudformation cloudformation:DescribeStackResourceDrifts cloudformation cloudformation:DescribeStacks cloudformation cloudformation:DetectStackDrift cloudformation cloudformation:DetectStackResourceDrift cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:ListStacks cloudformation cloudformation:UpdateStack cloudformation iam:AttachRolePolicy iam iam:CreateRole iam iam:CreateServiceLinkedRole iam iam:DeleteRole iam iam:DeleteRole iam iam:DeleteRolePolicy iam iam:DeleteRolePolicy iam iam:DetachRolePolicy iam iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListRolePolicies iam iam:ListRoleTags iam iam:PassRole iam iam:PassRole iam iam:PutRolePermissionsBoundary iam iam:PutRolePolicy iam iam:TagRole iam iam:UntagRole iam iam:UpdateRole iam lambda:CreateFunction lambda lambda:DeleteFunction lambda lambda:GetFunction lambda lambda:InvokeFunction lambda lambda:ListTags lambda lambda:TagResource lambda lambda:UntagResource lambda lambda:UpdateFunction* lambda logs:CreateLogGroup logs logs:DeleteLogGroup logs logs:DescribeLogGroups logs logs:ListTagsForResource logs logs:PutRetentionPolicy logs logs:TagResource logs logs:UntagResource logs resource-groups:GetGroupQuery resource-groups s3:CreateBucket s3 s3:DeleteBucket s3 s3:DeleteBucketPolicy s3 s3:Get* s3 s3:List* s3 s3:ListAllMyBuckets s3 s3:Put* s3 ssm:AddTagsToResource ssm ssm:CreateAssociation ssm ssm:CreateDocument ssm ssm:DeleteAssociation ssm ssm:DeleteDocument ssm ssm:DeleteDocument ssm ssm:DescribeAssociation ssm ssm:DescribeDocument ssm ssm:DescribeDocument ssm ssm:GetDocument ssm ssm:ListTagsForResource ssm ssm:RemoveTagsFromResource ssm ssm:UpdateAssociation ssm ssm:UpdateDocument ssm ssm:UpdateDocumentDefaultVersion ssm