To deploy your serverless API in production, you need the following minimal access for your IAM User:
- AWS Lambda Full Access
- Cloud Formation Full Access
- EC2 Full Access
- S3 Full Access
- API Gateway Administrator Access
- IAM Full Access
WARNING: Make sure to remove those access once you finished to deploy it!