permission for elastic-serverless-forwarder deployment user

[dimuskin]

I was able to make a deployment from a user with Admin rights without any problems. But I can’t set rights for the selected user with only needed permissions. I collected all requements from AccessDenied error, but this turned out to be not enough.

Currently I stuck on "Waiting stack create/update to complete"

aws cloudformation deploy --template-file /home/vsts/work/1/s/aws/application/sar-application.yaml --stack-name elastic-serverless-forwarder --capabilities CAPABILITY_IAM CAPABILITY_AUTO_EXPAND
========================== Starting Command Output ===========================
/usr/bin/bash /home/vsts/work/_temp/02cf459a-cae9-4af5-a3f6-ff82d57b09b6.sh
`Waiting for changeset to be created..` `Waiting for stack create/update to complete`
Failed to create/update the stack. Run the following command
to fetch the list of events leading up to the failure
aws cloudformation describe-stack-events --stack-name elastic-serverless-forwarder

no errors in AWS console, only event about failed SarCloudformationDeployment deployment:

Embedded stack arn:aws:cloudformation:eu-west-1:***********:stack/elastic-serverless-forwarder-SarCloudformationDe-ElasticServerlessForwarderApplication-15OU8707X1X5O/50b09f10-9b2d-11ee-95fc-0adddeb5e9a1 was not successfully updated. Currently in UPDATE_ROLLBACK_IN_PROGRESS with reason: Failed to execute transform 771130272758::elastic-serverless-forwarder-macro

How to find what permissions are missing?