permission for elastic-serverless-forwarder deployment user

I was able to make a deployment from a user with Admin rights without any problems. But I can’t set rights for the selected user with only needed permissions. I collected all requements from AccessDenied error, but this turned out to be not enough.

Currently I stuck on "Waiting stack create/update to complete"

`aws cloudformation deploy --template-file /home/vsts/work/1/s/aws/application/sar-application.yaml --stack-name elastic-serverless-forwarder --capabilities CAPABILITY_IAM CAPABILITY_AUTO_EXPAND`
`========================== Starting Command Output ===========================`
`/usr/bin/bash /home/vsts/work/_temp/02cf459a-cae9-4af5-a3f6-ff82d57b09b6.sh`
``
`Waiting for changeset to be created..`
`Waiting for stack create/update to complete`
``
`Failed to create/update the stack. Run the following command`
`to fetch the list of events leading up to the failure`
`aws cloudformation describe-stack-events --stack-name elastic-serverless-forwarder`

no errors in AWS console, only event about failed SarCloudformationDeployment deployment:

`Embedded stack arn:aws:cloudformation:eu-west-1:***********:stack/elastic-serverless-forwarder-SarCloudformationDe-ElasticServerlessForwarderApplication-15OU8707X1X5O/50b09f10-9b2d-11ee-95fc-0adddeb5e9a1 was not successfully updated. Currently in UPDATE_ROLLBACK_IN_PROGRESS with reason: Failed to execute transform 771130272758::elastic-serverless-forwarder-macro`

How to find what permissions are missing?