Policy: AmazonElasticsearchServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonElasticsearchServiceRolePolicy Allowed Actions Actions Services acm:DescribeCertificate acm cloudwatch:PutMetricData cloudwatch ec2:AssignIpv6Addresses ec2 ec2:CreateNetworkInterface ec2 ec2:CreateTags ec2 ec2:CreateVpcEndpoint ec2 ec2:CreateVpcEndpoint ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:ModifyVpcEndpoint ec2 ec2:ModifyVpcEndpoint ec2 ec2:UnAssignIpv6Addresses ec2 elasticloadbalancing:AddListenerCertificates elasticloadbalancing elasticloadbalancing:RemoveListenerCertificates elasticloadbalancing