The Amplify CLI requires several IAM policies for performing actions across all categories. You can grant or restrict category permissions by including or removing items from the 'Action' section as appropriate. AWS Amplify Documentation