IAMPermissionForAWSLambdaDeploy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "CreateFunctionPermissions",
            "Effect": "Allow",
            "Action": [
                "lambda:CreateFunction"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ReadFuctions",
            "Effect": "Allow",
            "Action": [
                "lambda:Get*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "UpdateFuctions",
            "Effect": "Allow",
            "Action": [
                "lambda:Update*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "PermissionToPassAnyRole",
            "Effect": "Allow",
            "Action": [
                "iam:PassRole"
            ],
            "Resource": "arn:aws:iam::ACCOUNT_ID:role/*"
        }
    ]
}