{ "resources": { "Distribution": { "grants": { "createInvalidation": { "actions": [ "cloudfront:CreateInvalidation" ], "docSummary": "Grant to create invalidations for this bucket to an IAM principal (Role/Group/User)." } } } } }