Waves permissions

permissions.json

{
	"Version": "2012-10-17",
	"Statement": [{
		"Effect": "Allow",
		"Action": [
			"acm:*",
			"acm-pca:*",
			"cloudfront:*",
			"elasticbeanstalk:*",
			"ec2:*",
			"ecs:*",
			"ecr:*",
			"elasticloadbalancing:*",
			"autoscaling:*",
			"cloudwatch:*",
			"s3:*",
			"sns:*",
			"cloudformation:*",
			"dynamodb:*",
			"rds:*",
			"sqs:*",
			"logs:*",
			"iam:AddRoleToInstanceProfile",
			"iam:CreateInstanceProfile",
			"iam:CreateRole",
			"iam:CreateServiceLinkedRole",
			"iam:AttachRolePolicy",
			"iam:GetPolicyVersion",
			"iam:GetRole",
			"iam:PassRole",
			"iam:ListRolePolicies",
			"iam:ListAttachedRolePolicies",
			"iam:ListInstanceProfiles",
			"iam:ListRoles",
			"iam:ListServerCertificates",
			"acm:DescribeCertificate",
			"acm:ListCertificates",
			"codebuild:CreateProject",
			"codebuild:DeleteProject",
			"codebuild:BatchGetBuilds",
			"codebuild:StartBuild",
			"waf:ListWebACLs",
			"waf:GetWebACL"
		],
		"Resource": "*"
	}]
}