Add a variable to provide a list of IAM policy actions for the IAM service role for the Amplify app. Update custom domain configuration

[aknysh]

what

• Add a variable to provide a list of IAM policy actions for the IAM service role for the Amplify app
• Update custom domain configuration. Add a new variable domain_config

why

• Amplify apps without a backend don't need an IAM role. Amplify apps with a backend need an IAM role, but many of them don't need a full set of actions as defined in the default set for the role. Allow specifying a custom set of actions for the IAM role. For example, for Amplify apps with server-side rendering, only the following IAM permissions are required (see Amazon CloudWatch Logs for SSR apps for more info)

  logs:CreateLogStream
  logs:CreateLogGroup
  logs:DescribeLogGroups
  logs:PutLogEvents
  

• Update custom domain configuration. Add a new variable domain_config. A custom domain is app-wide, not branch-wide, and needs to be specified in a separate variable (not part of the app's environments)

[aknysh]

/test all

[aknysh]

/test all

[aknysh]

/test all

[aknysh]

/test all

[aknysh]

/test all

[aknysh]

/test all