> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plerion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Minimum AWS permissions to launch Plerion CloudFormation stack

> Attach this IAM policy to a role or user to deploy the Plerion CloudFormation stack for CSPM, CIEM, and CWPP.

You need the following AWS IAM permissions to deploy the Plerion CloudFormation stack and enable **Cloud Security Posture Management (CSPM)**, **Cloud Infrastructure Entitlement Management (CIEM)**, and **Cloud Workload Protection Platform (CWPP)**.

<Note>
  Attach this policy to the IAM role or user responsible for launching the stack.\
  Once the stack is deployed successfully, you can remove the policy.
</Note>

```json theme={"system"}
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PlerionCloudFormationStackPermissions",
            "Effect": "Allow",
            "Action": [
                "cloudformation:GetTemplateSummary",
                "cloudformation:CreateStack",
                "cloudformation:DescribeStackEvents",
                "cloudformation:DescribeStacks",
                "cloudformation:ListStacks",
                "cloudformation:ListStackResources",
                "iam:GetPolicy",
                "iam:GetRole",
                "iam:GetRolePolicy",
                "iam:CreateRole",
                "iam:CreatePolicy",
                "iam:ListPolicyVersions",
                "iam:ListRoles",
                "iam:PutRolePolicy",
                "iam:AttachRolePolicy",
                "iam:PassRole",
                "iam:TagRole",
                "iam:CreateInstanceProfile",
                "iam:AddRoleToInstanceProfile",
                "iam:GetInstanceProfile",
                "lambda:CreateFunction",
                "lambda:GetFunction",
                "lambda:InvokeFunction",
                "lambda:TagResource"
            ],
            "Resource": "*"
        }
    ]
}
```