# Customize the Serverless IAM Policy

**URL:** <https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18>\
**Category:** Chapter Comments\
**Created:** [May 9, 2018, 6:39pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18 "2018-05-09T18:39:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![anomalyinnovations](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/anomalyinnovations/32/10_2.png) [@anomalyinnovations](https://discourse.sst.dev/u/anomalyinnovations)\
**Post date:** [May 9, 2018, 6:39pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/1 "2018-05-09T18:39:06Z")

</div>

_From @jayair on Fri Dec 01 2017 18:44:44 GMT+0000 (UTC)_  
  
Link to chapter - [https://serverless-stack.com/chapters/customize-the-serverless-iam-policy.html](https://serverless-stack.com/chapters/customize-the-serverless-iam-policy.html)  
  
_Copied from original issue: [https://github.com/AnomalyInnovations/serverless-stack-com/issues/167](https://github.com/AnomalyInnovations/serverless-stack-com/issues/167)_

---

<div class="post-metadata">

**Author:** ![mkjsix](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/mkjsix/32/216_2.png) [@mkjsix](https://discourse.sst.dev/u/mkjsix)\
**Post date:** [August 30, 2018, 9:46am UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/2 "2018-08-30T09:46:58Z")

</div>

Hi,

It seems the `cloudformation:PreviewStackUpdate` permission doesn’t exist, the IAM policy editor raises an error.

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [August 31, 2018, 5:42pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/3 "2018-08-31T17:42:07Z")

</div>

Thanks for pointing that out. There might have been some changes in CloudFormation and the article needs to be updated with that.

---

<div class="post-metadata">

**Author:** ![HpiGuillaume](https://avatars.discourse-cdn.com/v4/letter/h/9de0a6/32.png) [@HpiGuillaume](https://discourse.sst.dev/u/HpiGuillaume)\
**Post date:** [November 9, 2018, 1:32pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/4 "2018-11-09T13:32:19Z")

</div>

Hello,

It seems there is missing:

```
            "cloudformation:DescribeStackResources",
            "cloudformation:DescribeStackResource",
            "cloudformation:DescribeStackEvents",
            "cloudformation:DescribeStacks"

```

Who are needed for `serverless deploy` 😃  
Thanks for this article !!!

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [November 9, 2018, 6:55pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/5 "2018-11-09T18:55:58Z")

</div>

Oh I see. Maybe there was a recent update. We’ll take a look. Thanks for letting us know.

---

<div class="post-metadata">

**Author:** ![SeaGuy](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/seaguy/32/530_2.png) [@SeaGuy](https://discourse.sst.dev/u/SeaGuy)\
**Post date:** [July 16, 2019, 12:57pm UTC](https://discourse.sst.dev/t/customize-the-serverless-iam-policy/18/6 "2019-07-16T12:57:47Z")

</div>

Thank you very much! I was struggling with this and wanted to move away from attaching the SystemAdministrator policy to Users or Groups. It works like a charm - very helpful!