base_user_policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "dynamodb:CreateTable",
                "dynamodb:PutItem",
                "dynamodb:DescribeTable",
                "dynamodb:DeleteItem",
                "dynamodb:GetItem"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "iam:PassRole",
                "iam:CreateRole",
                "iam:DeleteRole",
                "iam:GetPolicyVersion",
                "iam:ListPolicyVersions",
                "iam:DetachRolePolicy",
                "iam:ListInstanceProfilesForRole",
                "iam:CreatePolicy",
                "iam:DeletePolicy",
                "iam:CreatePolicyVersion",
                "iam:DeletePolicyVersion",
                "iam:ListAttachedRolePolicies",
                "iam:AttachRolePolicy",
                "iam:ListRolePolicies",
                "iam:GetRole",
                "iam:GetPolicy"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor2",
            "Effect": "Allow",
            "Action": [
                "s3:Get*",
                "s3:List*",
                "s3:Put*",
                "s3:CreateBucket",
                "s3:DeleteBucket",
                "s3:DeleteBucketPolicy",
                "codepipeline:CreatePipeline",
                "codepipeline:DeletePipeline",
                "codepipeline:UpdatePipeline",
                "codepipeline:PutWebhook",
                "codepipeline:DeleteWebhook",
                "codepipeline:ListWebhooks",
                "codepipeline:ListTagsForResource",
                "codepipeline:TagResource",
                "codepipeline:GetPipeline",
                "codebuild:CreateProject",
                "codebuild:DeleteProject",
                "codebuild:UpdateProject",
                "codebuild:BatchGetProjects",
                "codedeploy:CreateDeployment",
                "codedeploy:GetApplicationRevision",
                "codedeploy:RegisterApplicationRevision",
                "codedeploy:GetDeploymentConfig",
                "codedeploy:GetDeployment",
                "codedeploy:GetApplication"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "VisualEditor3",
            "Effect": "Allow",
            "Action": [
                "acm:Add*",
                "acm:Delete*",
                "acm:Request*",
                "acm:List*",
                "acm:Put*",
                "acm:Describe*"
            ],
            "Resource": "*"
        }
    ]
}