Policy: AmazonEC2RolePolicyForLaunchWizard ARN: arn:aws:iam::aws:policy/AmazonEC2RolePolicyForLaunchWizard Allowed Actions Actions Services cloudformation:DescribeStackResource cloudformation cloudformation:DescribeStackResources cloudformation cloudformation:DescribeStacks cloudformation cloudformation:SignalResource cloudformation cloudwatch:GetMetricStatistics cloudwatch cloudwatch:PutMetricData cloudwatch dynamodb:BatchGetItem dynamodb dynamodb:CreateTable dynamodb dynamodb:DeleteTable dynamodb dynamodb:DescribeTable dynamodb dynamodb:PutItem dynamodb dynamodb:Query dynamodb dynamodb:Scan dynamodb dynamodb:UpdateItem dynamodb dynamodb:UpdateTable dynamodb ec2:AssociateAddress ec2 ec2:AttachVolume ec2 ec2:CreateTags ec2 ec2:CreateVolume ec2 ec2:Describe* ec2 ec2:DescribeAddresses ec2 ec2:DescribeImages ec2 ec2:DescribeInstances ec2 ec2:DescribeRegions ec2 ec2:DescribeRouteTables ec2 ec2:DescribeVolumes ec2 ec2:ModifyInstanceAttribute ec2 ec2:RebootInstances ec2 ec2:ReplaceRoute ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 fsx:DescribeFileSystems fsx fsx:DescribeStorageVirtualMachines fsx fsx:ListTagsForResource fsx logs:Create* logs logs:DescribeLogGroups logs logs:DescribeLogStreams logs logs:PutLogEvents logs s3:GetBucketLocation s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:GetObject s3 s3:ListBucket s3 s3:ListBucket s3 s3:PutObject s3 s3:PutObjectTagging s3 sqs:ReceiveMessage sqs sqs:SendMessage sqs ssm:GetCommandInvocation ssm ssm:GetDocument ssm ssm:SendCommand ssm ssm:SendCommand ssm