The CFT for the Backend Framework Setup and the creation of the QuickSight components create IAM in the AWS Account that it is installed.
Below is the list of the Roles and their Purpose:
IAM Execution role to Extract Data from DynamoDB Tables
Lambda to write data into s3 bucket
Lambda to read data from dynamodb tables
Lambda to setup glue crawlers
Lambda to update config in s3 bucket
Lambda to setup quicksight assets
Lambda to execute named queries on athena
Lambda to check quicksight dataset refresh status
Lambda to create and database on athena which connects to s3
Lambda to create datastores, datasets, themes on quicksight
Lambda to create datastores, datasets, themes on quicksight
Lambda to create topics on quicksight