Policy: AmazonMSKReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonMSKReadOnlyAccess Allowed Actions Actions Services ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 kafka:Describe* kafka kafka:Get* kafka kafka:List* kafka kms:DescribeKey kms