Policy: AmazonFSxConsoleFullAccess ARN: arn:aws:iam::aws:policy/AmazonFSxConsoleFullAccess Allowed Actions Actions Services cloudwatch:DescribeAlarms cloudwatch cloudwatch:GetMetricData cloudwatch ds:DescribeDirectories ds ec2:CreateTags ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:GetSecurityGroupsForVpc ec2 firehose:ListDeliveryStreams firehose fsx:AssociateFileGateway fsx fsx:AssociateFileSystemAliases fsx fsx:CancelDataRepositoryTask fsx fsx:CopyBackup fsx fsx:CopySnapshotAndUpdateVolume fsx fsx:CreateBackup fsx fsx:CreateDataRepositoryAssociation fsx fsx:CreateDataRepositoryTask fsx fsx:CreateFileCache fsx fsx:CreateFileSystem fsx fsx:CreateFileSystemFromBackup fsx fsx:CreateSnapshot fsx fsx:CreateStorageVirtualMachine fsx fsx:CreateVolume fsx fsx:CreateVolumeFromBackup fsx fsx:DeleteBackup fsx fsx:DeleteDataRepositoryAssociation fsx fsx:DeleteFileCache fsx fsx:DeleteFileSystem fsx fsx:DeleteResourcePolicy fsx fsx:DeleteSnapshot fsx fsx:DeleteStorageVirtualMachine fsx fsx:DeleteVolume fsx fsx:DescribeAssociatedFileGateways fsx fsx:DescribeBackups fsx fsx:DescribeDataRepositoryAssociations fsx fsx:DescribeDataRepositoryTasks fsx fsx:DescribeFileCaches fsx fsx:DescribeFileSystemAliases fsx fsx:DescribeFileSystems fsx fsx:DescribeSharedVpcConfiguration fsx fsx:DescribeSnapshots fsx fsx:DescribeStorageVirtualMachines fsx fsx:DescribeVolumes fsx fsx:DisassociateFileGateway fsx fsx:DisassociateFileSystemAliases fsx fsx:GetResourcePolicy fsx fsx:ListTagsForResource fsx fsx:ManageBackupPrincipalAssociations fsx fsx:PutResourcePolicy fsx fsx:ReleaseFileSystemNfsV3Locks fsx fsx:RestoreVolumeFromSnapshot fsx fsx:TagResource fsx fsx:UntagResource fsx fsx:UpdateDataRepositoryAssociation fsx fsx:UpdateFileCache fsx fsx:UpdateFileSystem fsx fsx:UpdateSharedVpcConfiguration fsx fsx:UpdateSnapshot fsx fsx:UpdateStorageVirtualMachine fsx fsx:UpdateVolume fsx iam:CreateServiceLinkedRole iam iam:CreateServiceLinkedRole iam kms:ListAliases kms logs:DescribeLogGroups logs s3:ListBucket s3