Open
Description
Describe the feature
Right now, hotswap will always use CLI credentials.
It would seem to make more sense to use the deploy role instead. Nominally, it should already have all the permissions necessary to make any CFN deployment, and hotswap is just doing the same as CFN deployments would do, but faster.
Use Case
Consistent permissions behavior between regular deployment and hotswap.
Complications
This effectively requires a developer workstation to be able to assume the CFN execution role: requires changing its trust policy, and effectively gives them unaudited Admin access.
Is that worth it? If you want that, you might as well give them Admin access directly.
It might not be worth it.