Terraform State Permissions

 Type: AWS::IAM::ManagedPolicy
Properties:
  Description: 'IAM Roles for Terraform State Resources'
  PolicyDocument:
    Version: '2012-10-17'
    Statement:
      - Effect: Allow
        Action:
          - dynamodb:GetItem
          - dynamodb:PutItem
          - dynamodb:DeleteItem
          - dynamodb:Describe*
          - dynamodb:ListTagsOfResource
        Resource:
          - !Sub 'arn:${AWS::Partition}:dynamodb:${AWS::Region}:${AWS::AccountId}:table/TerraformDynamoDBTable'
      - Effect: Allow
        Action:
          - s3:GetObject
          - s3:PutObject
        Resource:
          - !Sub 'arn:${AWS::Partition}:s3:::TerraformBucket/*'
      - Effect: Allow
        Action:
          - s3:List*
          - s3:Get*
          - s3:Describe*
        Resource:
          - !Sub 'arn:${AWS::Partition}:s3:::TerraformBucket'