Step 2: Setup AWS RoboMaker to deploy Robot Application

1. Create a policy

1. Go to IAM console and click on policies
2. Press on Create policy and select JSON tab.
3. Edit bucket-source with your bucket's name this JSON:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "robomaker:UpdateRobotDeployment"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:List*",
                "s3:Get*"
            ],
            "Resource": [
                "arn:aws:s3:::bucket-source/*"
            ]
        }
    ]
}

Then paste in JSON tab.
4. Press on Review policy, then give a name (e.g. upbot-greengrass-deploy) and press on Create policy

2. Create a role for robot deployment

1. Click on roles, then press on Create role
2. Choose Greengrass and press Next: Permissions
3. Search for your policy (e.g. upbot-greengrass-deploy), check and press Next: Tags
4. This step is optional so just press Next: Review
5. Give a name (e.g. upbot-robomaker-greengrass) and press Create role
6. Go to your role (e.g. upbot-robomaker-greengrass) and press on Trust relationships and then Edit trust relationship
7. Copy the following JSON:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": [
          "lambda.amazonaws.com",
          "greengrass.amazonaws.com"
        ]
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

and press Update Trust Policy