Generates an IAM policy for the CloudFormation service role that adheres to least privilege. - View it on GitHub