chatops-lex-bot/devops.yml [340:371]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                        Resource: !Sub 'arn:aws:s3:::${BuildArtifactsBucket}/*'
                      - 
                        Effect: Allow
                        Action: 
                          - 'codecommit:UploadArchive'
                          - 'codecommit:BatchGetRepositories'
                          - 'codecommit:CreateBranch'
                          - 'codecommit:CreateRepository'
                          - 'codecommit:Delete*'
                          - 'codecommit:Get*'
                          - 'codecommit:GitPull'
                          - 'codecommit:GitPush'
                          - 'codecommit:List*'
                          - 'codecommit:Put*'
                          - 'codecommit:Post*'
                          - 'codecommit:Merge*'
                          - 'codecommit:TagResource'
                          - 'codecommit:Test*'
                          - 'codecommit:UntagResource'
                          - 'codecommit:Update*'                              
                        Resource: !Sub 'arn:aws:codecommit:${AWS::Region}:${AWS::AccountId}:${CodeRepository.Name}'
                - PolicyName: CodePipelineCodeBuildAndCloudformationAccess
                  PolicyDocument:
                    Version: '2012-10-17'
                    Statement:
                      - 
                        Effect: Allow
                        Action: 
                          - 'codebuild:StartBuild'
                          - 'codebuild:BatchGetBuilds'
                        Resource: 
                          - !Sub 'arn:aws:codebuild:${AWS::Region}:${AWS::AccountId}:project/${CodeBuildProject}'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



devops.yml [520:551]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                        Resource: !Sub 'arn:aws:s3:::${BuildArtifactsBucket}/*'
                      - 
                        Effect: Allow
                        Action: 
                          - 'codecommit:UploadArchive'
                          - 'codecommit:BatchGetRepositories'
                          - 'codecommit:CreateBranch'
                          - 'codecommit:CreateRepository'
                          - 'codecommit:Delete*'
                          - 'codecommit:Get*'
                          - 'codecommit:GitPull'
                          - 'codecommit:GitPush'
                          - 'codecommit:List*'
                          - 'codecommit:Put*'
                          - 'codecommit:Post*'
                          - 'codecommit:Merge*'
                          - 'codecommit:TagResource'
                          - 'codecommit:Test*'
                          - 'codecommit:UntagResource'
                          - 'codecommit:Update*'            
                        Resource: !Sub 'arn:aws:codecommit:${AWS::Region}:${AWS::AccountId}:${CodeRepository.Name}'
                - PolicyName: CodePipelineCodeBuildAndCloudformationAccess
                  PolicyDocument:
                    Version: '2012-10-17'
                    Statement:
                      - 
                        Effect: Allow
                        Action: 
                          - 'codebuild:StartBuild'
                          - 'codebuild:BatchGetBuilds'
                        Resource: 
                          - !Sub 'arn:aws:codebuild:${AWS::Region}:${AWS::AccountId}:project/${CodeBuildProject}'
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



