Creating Serverless IAM Deployment Policy


I looked for some documentation about Serverless IAM Deployment Policy, and what it requires. At the moment I gave it a full permissions, but I want to narrow the policy.

Is there any documentation to what the Serverless requires for deployment?

The closest thing is this issue on GitHub, which might be a bit out of date (because new features have been added since it was last updated).