Policy: AmazonFSxServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonFSxServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ds:AuthorizeApplication ds ds:GetAuthorizedApplicationDetails ds ds:UnauthorizeApplication ds ec2:AssignPrivateIpAddresses ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:CreateRoute ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteRoute ec2 ec2:DescribeAddresses ec2 ec2:DescribeDhcpOptions ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:DisassociateAddress ec2 ec2:GetSecurityGroupsForVpc ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:ReplaceRoute ec2 ec2:UnassignPrivateIpAddresses ec2 firehose:DescribeDeliveryStream firehose firehose:PutRecord firehose firehose:PutRecordBatch firehose logs:DescribeLogGroups logs logs:DescribeLogStreams logs logs:PutLogEvents logs route53:AssociateVPCWithHostedZone route53