example.aws-iam-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Sid": "ModifyS3Bucket",
          "Effect": "Allow",
          "Action": [
              "s3:PutObject",
              "s3:DeleteObject"
          ],
          "Resource": [
              "arn:aws:s3:::*/*"
          ]
      },
      {
          "Sid": "invalidateCloudFrontDistribution",
          "Effect": "Allow",
          "Action": [
              "cloudfront:CreateInvalidation"
          ],
          "Resource": [
              "arn:aws:cloudfront::{Account}:distribution/*"
          ]
      },
      {
          "Sid": "listS3Bucket",
          "Effect": "Allow",
          "Action": "s3:ListBucket",
          "Resource": "arn:aws:s3:::*"
      },
      {
          "Sid": "listCloudFrontDistributions",
          "Effect": "Allow",
          "Action": [
              "cloudfront:ListDistributions"
          ],
          "Resource": [
              "*"
          ]
      }
  ]
}