title: CloudFormation change set User not authorized
body: <p>I am trying to publish aws lambda to my client aws account however I keep getting this error message. </p>
  
  <pre><code>Error creating CloudFormation change set: User: arn:aws:iam::xxxxxx:user/testuser is not authorized to perform: cloudformation:CreateChangeSet on resource: arn:aws:cloudformation:eu-west-1:xxxx:stack/test-Stack/*
  </code></pre>
  
  <p>When i tested on my own account I have added my IAM user with a policy of "AdministratorAccess" which basically allow everything.</p>
  
  <p>I checked the policies there is only "CloudFormationReadonlyAccess" but these does not allow write/delete. What policy should I ask my client to assign to the IAM user?</p>
  
  <p>I have also try adding to my role</p>
  
  <pre><code>"cloudformation:CreateStack",
  "cloudformation:CreateChangeSet",
  "cloudformation:ListStacks",
  "cloudformation:UpdateStack",
  "cloudformation:DescribeStacks",
  "cloudformation:DescribeStackResource",
  "cloudformation:DescribeStackEvents",
  "cloudformation:ValidateTemplate",
  "cloudformation:DescribeChangeSet",
  "cloudformation:ExecuteChangeSet"
  </code></pre>
  
  <p>but the same error occur.</p>