A (hopefully) minimum AWS IAM policy for serverless framework

serverless-iam-policy.json

# Note these are variable you should replace
# MyAccountNumber is your AWS account number
# ServerlessServiceName is the service name you are defining on serverless config
# 
# Additional note regarding region like us-west-2, you should change it to fit your situations

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "CloudformationRead",
            "Effect": "Allow",
            "Action": [
                "cloudformation:BatchDescribeTypeConfigurations",
                "cloudformation:Describe*",
                "cloudformation:Detect*",
                "cloudformation:EstimateTemplateCost",
                "cloudformation:Get*",
                "cloudformation:List*",
                "cloudformation:ValidateTemplate"
            ],
            "Resource": "*"
        },
        {
            "Sid": "CloudformationWrite",
            "Effect": "Allow",
            "Action": [
                "cloudformation:ActivateType",
                "cloudformation:CancelUpdateStack",
                "cloudformation:ContinueUpdateRollback",
                "cloudformation:CreateChangeSet",
                "cloudformation:CreateStack",
                "cloudformation:CreateStackInstances",
                "cloudformation:CreateStackSet",
                "cloudformation:DeactivateType",
                "cloudformation:DeleteChangeSet",
                "cloudformation:DeleteStack",
                "cloudformation:DeleteStackInstances",
                "cloudformation:DeleteStackSet",
                "cloudformation:DeregisterType",
                "cloudformation:ExecuteChangeSet",
                "cloudformation:ImportStacksToStackSet",
                "cloudformation:PublishType",
                "cloudformation:RecordHandlerProgress",
                "cloudformation:RegisterPublisher",
                "cloudformation:RegisterType",
                "cloudformation:Set*",
                "cloudformation:SignalResource",
                "cloudformation:StopStackSetOperation",
                "cloudformation:TagResource",
                "cloudformation:TestType",
                "cloudformation:UntagResource",
                "cloudformation:Update*"
            ],
            "Resource": [
                "arn:aws:cloudformation:us-west-2:MyAccountNumber:stack/ServerlessServiceName-*/*"
            ]
        },
        {
            "Sid": "S3Access",
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::ServerlessServiceName-*-serverlessdeploymentbucket-*"
            ]
        },
        {
            "Sid": "IamAccess",
            "Effect": "Allow",
            "Action": [
                "iam:*"
            ],
            "Resource": [
                "arn:aws:iam::MyAccountNumber:role/ServerlessServiceName-*-us-west-2-lambdaRole"
            ]
        },
        {
            "Sid": "apiGatewayAccess",
            "Effect": "Allow",
            "Action": [
                "apigateway:*"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "logsAccess",
            "Effect": "Allow",
            "Action": [
                "logs:*"
            ],
            "Resource": [
                "arn:aws:logs:us-west-2:MyAccountNumber:log-group:/aws/lambda/ServerlessServiceName-*-*:log-stream:*"
            ]
        },
        {
            "Sid": "lambdaAccess",
            "Effect": "Allow",
            "Action": [
                "lambda:*"
            ],
            "Resource": [
                "arn:aws:lambda:us-west-2:MyAccountNumber:function:ServerlessServiceName-*-*"
            ]
        },
        {
            "Sid": "eventBridgeAccess",
            "Effect": "Allow",
            "Action": [
                "events:*"
            ],
            "Resource": [
                "arn:aws:events:us-west-2:MyAccountNumber:rule/ServerlessServiceName-*-*-*"
            ]
        }
    ]
}