Policy: AmazonDRSVPCManagement ARN: arn:aws:iam::aws:policy/AmazonDRSVPCManagement Allowed Actions Actions Services ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateSecurityGroup ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteSecurityGroup ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:RevokeSecurityGroupIngress ec2