TLDR; The list of required permissions is as follows: These include BatchCheckLayerAvailability, GetAuthorizationToken, CompleteLayerUpload, InitiateLayerUpload, PutImage, and UploadLayerPart. This is the role's detail in JSON format. { "Version": "2012-10-17", "Statement": [ { "Sid"