Policy: AmazonEKSLocalOutpostClusterPolicy ARN: arn:aws:iam::aws:policy/AmazonEKSLocalOutpostClusterPolicy Allowed Actions Actions Services ec2:DescribeAvailabilityZones ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeTags ec2 ec2messages:AcknowledgeMessage ec2messages ec2messages:DeleteMessage ec2messages ec2messages:FailMessage ec2messages ec2messages:GetEndpoint ec2messages ec2messages:GetMessages ec2messages ec2messages:SendReply ec2messages ecr:BatchGetImage ecr ecr:GetAuthorizationToken ecr ecr:GetDownloadUrlForLayer ecr ecr-public:GetAuthorizationToken ecr-public logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:PutLogEvents logs secretsmanager:DeleteSecret secretsmanager secretsmanager:GetSecretValue secretsmanager ssm:DescribeDocumentParameters ssm ssm:DescribeInstanceProperties ssm ssm:ListInstanceAssociations ssm ssm:PutComplianceItems ssm ssm:PutInventory ssm ssm:RegisterManagedInstance ssm ssm:UpdateInstanceAssociationStatus ssm ssm:UpdateInstanceInformation ssm ssmmessages:CreateControlChannel ssmmessages ssmmessages:CreateDataChannel ssmmessages ssmmessages:OpenControlChannel ssmmessages ssmmessages:OpenDataChannel ssmmessages