Example Dependabot + CodeCommit IAM Policy

dependabot_codecommit_iam_policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "0",
            "Effect": "Allow",
            "Action": [
                "codecommit:CreateBranch",
                "codecommit:GetCommit",
                "codecommit:GetRepository",
                "codecommit:BatchGetCommits",
                "codecommit:GetBranch",
                "codecommit:ListPullRequests",
                "codecommit:GetFolder",
                "codecommit:CreatePullRequest",
                "codecommit:CreateCommit",
                "codecommit:GetPullRequest",
                "codecommit:GetFile"
            ],
            "Resource": "arn:aws:codecommit:us-east-1:012345678901:myaws-codecommit-repo",
            "Condition": {
                "BoolIfExists": {
                    "aws:MultiFactorAuthPresent": "true"
                }
            }
        }
    ]
}