Hi everyone, new to IaC and pulumi. Is there list of policies/permissions a user needs to have in order to work with pulumi? I created an IAM user with the PowerUser policy and it was missing some permissions: example

iam:CreateRole

. Just wondering before I go ahead and start adding policies until I get

pulumi up

to work.

Pulumi itself doesn’t really require any permissions - it’s mostly the resources you decide to create/update/delete which will require permissions to create/update/delete the corresponding resources. If you are seeing the need for

iam:CrateRole

, I would expect that to be due to trying to create a Role with Pulumi.

thanks for the reply!