Thanks for the article - pointed me in the right direction, however, I think only this policy directive is needed since the error is just for "codestar-connections": { "Action": [ "codestar-connections:UseConnection" ], "Resource": "*", "Effect": "Allow" }