Document the service role required for AWS CodePipeline Implement service role creation required for AWS CodePipeline Change templates to use fine-grained privileges Rename mapping add .json version of templates