Skip to content

Instantly share code, notes, and snippets.

@tmaslen
Last active May 24, 2019 11:01
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tmaslen/242974ab548b9ececcd32695dd618a83 to your computer and use it in GitHub Desktop.
Save tmaslen/242974ab548b9ececcd32695dd618a83 to your computer and use it in GitHub Desktop.
AWS IAM Profile with all the required permissions for deploying a Lambda + API Gateway via Cloudformation
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": [
"s3:PutObject",
"s3:CreateMultipartUpload",
"s3:AbortMultipartUpload"
],
"Resource": "arn:aws:s3:::<NAME_OF_YOUR_S3_BUCKET>"
},
{
"Effect": "Allow",
"Action": [
"apigateway:GET",
"apigateway:POST",
"apigateway:DELETE",
"iam:AttachRolePolicy",
"iam:CreateRole",
"iam:DeleteRole",
"iam:DeleteRolePolicy",
"iam:DetachRole",
"iam:DetachRolePolicy",
"iam:GetRole",
"iam:ListInstanceProfilesForRole",
"iam:PassRole",
"iam:PutRolePolicy",
"lambda:AddPermission",
"lambda:*",
"logs:CreateLogGroup",
"logs:DeleteLogGroup",
"logs:DescribeLogGroups",
"logs:DescribeLogStreams",
"logs:FilterLogEvents"
],
"Resource": "*"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment