Policy: AmazonEKSServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonEKSServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:DeleteLaunchTemplate ec2 ec2:DeleteLaunchTemplate ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSnapshot ec2 ec2:DeleteTags ec2 ec2:DeleteTags ec2 ec2:DeleteVolume ec2 ec2:DescribeAccountAttributes ec2 ec2:DescribeAddresses ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeCoipPools ec2 ec2:DescribeInstanceTypeOfferings ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSpotPriceHistory ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVolumes ec2 ec2:DescribeVolumesModifications ec2 ec2:DescribeVpcPeeringConnections ec2 ec2:DescribeVpcs ec2 ec2:DetachNetworkInterface ec2 ec2:GetCoipPoolUsage ec2 ec2:GetSecurityGroupsForVpc ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 ec2:TerminateInstances ec2 ec2:TerminateInstances ec2 eks:AssociateAccessPolicy eks eks:CreateAccessEntry eks eks:DeleteAccessEntry eks eks:DescribeAccessEntry eks eks:DescribeCluster eks eks:DisassociateAccessPolicy eks eks:ListAssociatedAccessPolicies eks elasticloadbalancing:DeleteListener elasticloadbalancing elasticloadbalancing:DeleteLoadBalancer elasticloadbalancing elasticloadbalancing:DeleteRule elasticloadbalancing elasticloadbalancing:DeleteTargetGroup elasticloadbalancing elasticloadbalancing:DeregisterTargets elasticloadbalancing elasticloadbalancing:DescribeListenerAttributes elasticloadbalancing elasticloadbalancing:DescribeListenerCertificates elasticloadbalancing elasticloadbalancing:DescribeListeners elasticloadbalancing elasticloadbalancing:DescribeLoadBalancerAttributes elasticloadbalancing elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing elasticloadbalancing:DescribeRules elasticloadbalancing elasticloadbalancing:DescribeSSLPolicies elasticloadbalancing elasticloadbalancing:DescribeTags elasticloadbalancing elasticloadbalancing:DescribeTargetGroupAttributes elasticloadbalancing elasticloadbalancing:DescribeTargetGroups elasticloadbalancing elasticloadbalancing:DescribeTargetHealth elasticloadbalancing elasticloadbalancing:DescribeTrustStores elasticloadbalancing events:PutRule events events:PutTargets events iam:CreateInstanceProfile iam iam:DeleteInstanceProfile iam iam:GetInstanceProfile iam iam:ListAttachedRolePolicies iam iam:RemoveRoleFromInstanceProfile iam logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:PutLogEvents logs pricing:GetProducts pricing route53:AssociateVPCWithHostedZone route53 shield:DescribeProtection shield shield:GetSubscriptionState shield tag:GetResources tag