Policy: AmazonEC2ContainerServiceRole ARN: arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole Allowed Actions Actions Services ec2:AuthorizeSecurityGroupIngress ec2 ec2:Describe* ec2 elasticloadbalancing:DeregisterInstancesFromLoadBalancer elasticloadbalancing elasticloadbalancing:DeregisterTargets elasticloadbalancing elasticloadbalancing:Describe* elasticloadbalancing elasticloadbalancing:RegisterInstancesWithLoadBalancer elasticloadbalancing elasticloadbalancing:RegisterTargets elasticloadbalancing