Resources: MinimalFunction: Type: AWS::Serverless::Function Properties: CodeUri: s3://sam-demo-bucket/hello.zip Handler: hello.handler Runtime: python2.7 PermissionsBoundary: arn:aws:1234:iam:boundary/CustomerCreatedPermissionsBoundary