{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ProjectSpecific",
            "Effect": "Allow",
            "Action": [
                "devicefarm:GetTest",
                "devicefarm:GetRun",
                "devicefarm:ListTests",
                "devicefarm:ListUploads",
                "devicefarm:ListNetworkProfiles",
                "devicefarm:ScheduleRun",
                "devicefarm:GetDevicePoolCompatibility",
                "devicefarm:ListSuites",
                "devicefarm:GetDevicePool",
                "devicefarm:ListDevicePools",
                "devicefarm:GetNetworkProfile",
                "devicefarm:GetDevice",
                "devicefarm:GetProject",
                "devicefarm:ListRuns",
                "devicefarm:ListUniqueProblems",
                "devicefarm:ListArtifacts",
                "devicefarm:ListJobs",
                "devicefarm:StopJob",
                "devicefarm:CreateUpload",
                "devicefarm:GetSuite",
                "devicefarm:GetUpload",
                "devicefarm:DeleteUpload",
                "devicefarm:GetJob",
                "devicefarm:StopRun",
                "devicefarm:ListTagsForResource",
                "devicefarm:ListRemoteAccessSessions",
                "devicefarm:ListSamples",
                "iam:GetUser",
                "iam:GetLoginProfile",
								"s3:GetObject"
            ],
            "Resource": [
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:project:**%RESOURCE_ID%**",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:upload:**%RESOURCE_ID%***",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:test:*",
                "arn:aws:devicefarm:*::deviceinstance:*",
                "arn:aws:devicefarm:*::device:*",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:suite:*",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:run:**%RESOURCE_ID%***",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:job:**%RESOURCE_ID%***",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:networkprofile:**%RESOURCE_ID%***",
                "arn:aws:devicefarm:*:**%ACCOUNT_ID%**:devicepool:**%RESOURCE_ID%***",
								"arn:aws:s3:::devicefarm-temp.apptim.com/*",
                "arn:aws:iam::**%ACCOUNT_ID%**:user/**%USERNAME%"**
            ]
        },
        {
            "Sid": "ListAllDevices",
            "Effect": "Allow",
            "Action": "devicefarm:ListDevices",
            "Resource": "*"
        },
        {
            "Sid": "ListProjects",
            "Effect": "Allow",
            "Action": "devicefarm:ListProjects",
            "Resource": "*"
        }
    ]
}

How to get the ResourceId:

• Navigate to the AWS Device Farm console, select or create a New Project, and obtain the ResouceId from the URL shown in the projectARN, below the project name:

  project ARN: arn:aws:devicefarm:RegionId:AccountId:project:ResourceId