CloudFront Invalidation IAM Policy (Least Privilege)

[Alexandrbig1]

Priority: High
Difficulty: Easy

---

Description:
Create an IAM policy that grants CI/CD workflows only the cloudfront:CreateInvalidation permission, scoped to the specific CloudFront distribution ARN.

• Ensure the policy follows the principle of least privilege.

Acceptance Criteria:

• IAM policy allows only cloudfront:CreateInvalidation for the exact distribution ARN
• Policy is attached to the CI/CD role or user