Policy: AmazonAppStreamServiceAccess ARN: arn:aws:iam::aws:policy/service-role/AmazonAppStreamServiceAccess Allowed Actions Actions Services ds:DescribeDirectories ds ec2:AssociateAddress ec2 ec2:CreateNetworkInterface ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:DisassociateAddress ec2 s3:CreateBucket s3 s3:DeleteObject s3 s3:DeleteObjectVersion s3 s3:GetBucketPolicy s3 s3:GetObject s3 s3:GetObjectVersion s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutBucketPolicy s3 s3:PutEncryptionConfiguration s3 s3:PutObject s3