CodeBuild Service Role

create-service-role.json

{
	"Version": "2012-10-17",
	"Statement": [{
		"Effect": "Allow",
		"Principal": {
			"Service": "codebuild.amazonaws.com"
		},
		"Action": [ 
			"sts:AssumeRole",
                	"ssm:GetParameters",
                	"logs:PutLogEvents",
               		"logs:CreateLogStream",
			"logs:CreateLogGroup",
			"ecr:UploadLayerPart",
			"ecr:PutImage",
			"ecr:InitiateLayerUpload",
			"ecr:GetAuthorizationToken",
			"ecr:CompleteLayerUpload",
			"ecr:BatchCheckLayerAvailability"
		],
		"Resource": "*"
	}]
}