As far as I am aware of, there is no place to find a grant list of permissions required to perform any specific AWS action. That being said, there are a few things that may be helpful for your situation:
- It is recommended to have restricted access for operational purposes, but usually it does not make sense to apply strict rules for development. Unless there is a specific task role that performs and only performs Lambda code upload operation, I won't recommend spend too much time to figure out the exact boundary of a deployment role. Admin access is appropriate in this case.
- For lambda code upload, the only required permission is UpdateFunctionCode. If you upload the file to S3, the S3 permission is also required. It seems you are also using CloudFormation to make deployments. It is a bit unclear how you are deploying the code, as the permissions required differ by the frameworks. Sometimes it is just a trial-and-error process.
- IAM Policy Simulator let you test your role permissions, if you know which operations you are performing.