Thanks in advance…
Can we use service roles for deploying serverless using sls deploy rather than using access keys?
What is the best practice for deploying, whether to
=> create a user with lot of permissions like Lambda create,del… and api gateway create del etc…
or
=> can it be done via service where the service role is given the access and user is given access to trigger the service only?
you can use roles to deploy. Just make sure your credentials are set.
I defined a deployment role with minimal permissions for shipping code, also defined other roles for creating infrastructure. I wrote some details here: https://medium.com/@dav009/serverless-framework-minimal-iam-role-permissions-ba34bec0154e