fix: add missing actions to policy.json (#1315)

* feat: add missing dynamodb action to policy.json

describe table has been needed since #1111

* feat: add missing lambda action to policy.json

list event source mappings has been needed since #1040

* feat: add missing iam action to policy.json

list users has been needed since #991

* fix: correct s3 permission for list buckets api call

listbucket iam action is for the contents of a bucket

* feat: add missing code suite actions to policy.json

needed since #1216, #1229, and #1228

policy.json

@@ -6,6 +6,11 @@
 			"Effect": "Allow",
 			"Action": [
 				"apigateway:GET",
+				"codecommit:ListRepositories",
+				"codecommit:ListTagsForResource",
+				"codebuild:ListProjects",
+				"codedeploy:ListApplications",
+				"codedeploy:ListDeploymentGroups",
 				"cloudwatch:GetMetricStatistics",
 				"cloudfront:ListDistributions",
 				"cloudfront:ListFunctions",
@@ -14,6 +19,7 @@
 				"cloudwatch:ListTagsForResource",
 				"cloudwatch:ListDashboards",
 				"cloudwatch:ListMetricStreams",
+				"dynamodb:DescribeTable",
 				"dynamodb:ListTables",
 				"sts:GetCallerIdentity",
 				"dynamodb:ListTagsOfResource",
@@ -55,6 +61,7 @@
 				"iam:ListRoles",
 				"iam:ListSAMLProviders",
 				"iam:ListSAMLProviderTags",
+				"iam:ListUsers",
 				"kinesis:ListStreams",
 				"kinesis:ListStreamConsumers",
 				"kms:ListKeys",
@@ -83,11 +90,12 @@
 				"elasticfilesystem:DescribeFileSystems",
 				"elasticfilesystem:ListTagsForResource",
 				"iam:ListInstanceProfileTags",
+				"lambda:ListEventSourceMappings",
 				"lambda:ListFunctions",
 				"lambda:ListTags",
 				"es:ListDomainNames",
 				"es:DescribeDomains",
-				"s3:ListBucket"
+				"s3:ListAllMyBuckets"
 			],
 			"Resource": "*"
 		}