PR for issue #585 Add IAM Read only permissions to SAM Policy templates

[turjachaudhuri]

Issue #, if available: Issue ID 585

I am creating a serverless app that will validate whether a specified AccessKey is valid or not and if valid , it will return some metadata like accesskeycreatedate ,lastuseddate and so on.

This requires the following permissions -
{
"Action":[
"iam:ListAccessKeys",
"iam:GetAccessKeyLastUsed",
"iam:ListUsers"
],
"Effect":"Allow",
"Resource":"*"
}

Currently there is no Policy template is SAM which provides IAM Readonly permissions .

Description of changes:

Added the following permissions as part of a new policy in all required files
{
"Sid":"IAMPermissions",
"Action":[
"iam:ListAccessKeys",
"iam:GetAccessKeyLastUsed",
"iam:ListUsers"
],
"Effect":"Allow",
"Resource":"*"
}

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[keetonian]

Thank you for your contribution! We are reviewing this Policy Template submission and will get back to you soon!

[brettstack]

Could you please scope the Resource appropriately? See documentation https://docs.aws.amazon.com/IAM/latest/UserGuide/access_permissions-required.html

[jfuss]

Closing due to lack of response.