Policy: AmazonDynamoDBFullAccesswithDataPipeline ARN: arn:aws:iam::aws:policy/AmazonDynamoDBFullAccesswithDataPipeline Allowed Actions Actions Services cloudwatch:DeleteAlarms cloudwatch cloudwatch:DescribeAlarmHistory cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:DescribeAlarmsForMetric cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch cloudwatch:PutMetricAlarm cloudwatch datapipeline:* datapipeline datapipeline:* datapipeline dynamodb:* dynamodb ec2:CreateTags ec2 ec2:DescribeInstances ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 elasticmapreduce:* elasticmapreduce iam:GetRolePolicy iam iam:ListRoles iam iam:ListRoles iam iam:PassRole iam lambda:* lambda s3:DeleteObject s3 s3:Get* s3 s3:List* s3 s3:Put* s3 sns:CreateTopic sns sns:DeleteTopic sns sns:ListSubscriptions sns sns:ListSubscriptionsByTopic sns sns:ListTopics sns sns:SetTopicAttributes sns sns:Subscribe sns sns:Unsubscribe sns