iam_permissions_for_ec2.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AmplifyAccess",
            "Effect": "Allow",
            "Action": [
                "cloudformation:List*",
                "cloudformation:Describe*",
                "cloudformation:Get*",
                "cloudformation:Validate*",
                "cloudformation:Detect*",
				"cognito-idp:ListUserPools",
                "cognito-idp:ListIdentityProviders",
                "cognito-idp:DescribeIdentityProvider",
                
                "amplify:List*",
                "amplify:Get*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AmplifyS3Access",
            "Effect": "Allow",
            "Action": [
                "s3:List*",
                "s3:Get*"
            ],
            "Resource": [
                "arn:aws:s3:::MY_AMPLIFY_PROJECT_DEPLOYMENT_BUCKET/*",
                "arn:aws:s3:::MY_AMPLIFY_PROJECT_DEPLOYMENT_BUCKET"
            ]
        },
        {
            "Sid": "SQSAccess",
            "Effect": "Allow",
            "Action": [
                "sqs:Receive*",
                "sqs:Send*",
                "sqs:DeleteMessage"
            ],
            "Resource": "*"
        },
        {
            "Sid": "SecretsManagerAccess",
            "Effect": "Allow",
            "Action": "secretsmanager:GetSecretValue",
            "Resource": [
                "arn:aws:secretsmanager:REGION:ACCOUNT_ID:secret:amplify*",
                "arn:aws:secretsmanager:REGION:ACCOUNT_ID:secret:apple*"
            ]
        },
        {
            "Sid": "DeviceFarmAccess",
            "Effect": "Allow",
            "Action": [
                "devicefarm:CreateUpload",
                "devicefarm:GetUpload",
                "devicefarm:ListUploads",
                "devicefarm:ListDevicePools",
                "devicefarm:ScheduleRun",
                "devicefarm:GetRun"
            ],
            "Resource": "*"
        }      
    ]
}