chatops-lex-bot/devops.yml [230:249]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                      - Effect: Allow
                        Action:
                          - 'cloudwatch:DescribeAlarms'
                          - 'cloudwatch:PutMetricAlarm'
                        Resource: !Sub 'arn:aws:cloudwatch:${AWS::Region}:${AWS::AccountId}:alarm:${ProjectName}*'
                      - Effect: Allow
                        Action:
                          - 'iam:AttachRolePolicy'
                          - 'iam:CreateRole'
                          - 'iam:CreateServiceLinkedRole'
                          - 'iam:GetRole'
                          - 'iam:GetRolePolicy'
                          - 'iam:PutRolePolicy'
                          - 'iam:DetachRolePolicy'
                          - 'iam:DeleteRole'
                          - 'iam:DeleteRolePolicy'
                          - 'iam:PassRole'
                        Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/${ProjectName}*'
                      - Effect: Allow
                        Action:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



devops.yml [409:428]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                      - Effect: Allow
                        Action:
                          - 'cloudwatch:DescribeAlarms'
                          - 'cloudwatch:PutMetricAlarm'
                        Resource: !Sub 'arn:aws:cloudwatch:${AWS::Region}:${AWS::AccountId}:alarm:${ProjectName}*'
                      - Effect: Allow
                        Action:
                          - 'iam:AttachRolePolicy'
                          - 'iam:CreateRole'
                          - 'iam:CreateServiceLinkedRole'
                          - 'iam:GetRole'
                          - 'iam:GetRolePolicy'
                          - 'iam:PutRolePolicy'
                          - 'iam:DetachRolePolicy'
                          - 'iam:DeleteRole'
                          - 'iam:DeleteRolePolicy'
                          - 'iam:PassRole'
                        Resource: !Sub 'arn:aws:iam::${AWS::AccountId}:role/${ProjectName}*'
                      - Effect: Allow
                        Action: 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



