policies required:
{ "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1469172280000", "Effect": "Allow", "Action": [ "cloudformation:" ], "Resource": [ "" ] }, { "Sid": "Stmt1469172310000", "Effect": "Allow", "Action": [ "lambda:" ], "Resource": [ "" ] }, { "Sid": "Stmt1469171339000", "Effect": "Allow", "Action": [ "iam:GetRole", "iam:CreateRole", "iam:PutRolePolicy", "iam:DeleteRolePolicy", "iam:PassRole" ], "Resource": [ "*" ] } ] }
OR try with ...
PowerUser and some iam stuff ...
{ "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1469171339000", "Effect": "Allow", "Action": [ "iam:GetRole", "iam:CreateRole", "iam:PutRolePolicy", "iam:DeleteRolePolicy" ], "Resource": [ "*" ] } ] }