Unable to create LambdaExecutionRole and Citrix User - Required Permissions

[clw111]

Failed to create QSDeploymentID, which seems to be related to insufficient permissions from the IAM role used on page 2 when creating the stack in an existing VPC. I do not see a list of required permissions for creating the stack, so I built one manually based on the Citrix documentation for managing, creating, and deleting VMs. Added iam:CreateRole, iam:CreateUser, iam:DeleteRole, iam:DeleteUser, and iam:PassRole to troubleshoot. If I specify "arn:aws:iam:::role/" as the resource it errors in the same place as if I specify "*" as the resource.

Could someone please share or direct me to a list of required permissions for the IAM role creating the stack?

Thank you.