Policy: AmazonElasticFileSystemServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonElasticFileSystemServiceRolePolicy Allowed Actions Actions Services backup:CreateBackupPlan backup backup:CreateBackupSelection backup backup:CreateBackupVault backup backup:PutBackupVaultAccessPolicy backup backup-storage:MountCapsule backup-storage ec2:CreateNetworkInterface ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:ModifyNetworkInterfaceAttribute ec2 elasticfilesystem:CreateReplicationConfiguration elasticfilesystem elasticfilesystem:DeleteReplicationConfiguration elasticfilesystem elasticfilesystem:DescribeFileSystems elasticfilesystem elasticfilesystem:DescribeReplicationConfigurations elasticfilesystem elasticfilesystem:ReplicationRead elasticfilesystem elasticfilesystem:ReplicationWrite elasticfilesystem iam:CreateServiceLinkedRole iam iam:PassRole iam kms:DescribeKey kms tag:GetResources tag