Hi Alex! If you're using Terraform, here's the minimum required permissions the user needs to run applies:
https://fleetdm.com/docs/deploy/reference-architectures#aws-terraform-ci-cd-iam-permissions. Does that match what you're looking for? Otherwise, the question comes down to how the user in your deployment interacts with your resources, and the minimum permission set required to effectively make those changes. I'd love to hear more if you can share.