The AWS IAM policy required of Infrastructure-Components

iam_policy.json

{
  "Statement": [
    {
      "Action": [
        "s3:*",
        "apigateway:*",
        "lambda:*",
        "logs:*",
        "cloudformation:*",
        "cloudfront:*",
        "acm:ListCertificates",
        "route53:ListHostedZones",
        "route53:ListResourceRecordSets",
        "route53:ChangeResourceRecordSets",
        "route53:GetChange",
        "iam:CreateRole",
        "iam:DeleteRole",
        "iam:DeleteRolePolicy",
        "iam:GetRole",
        "iam:PassRole",
        "iam:PutRolePolicy",
        "execute-api:ManageConnections",
        "cloudfront:UpdateDistribution"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ],
  "Version": "2012-10-17"
}