Policy: AmazonPrometheusScraperServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonPrometheusScraperServiceRolePolicy Allowed Actions Actions Services aps:RemoteWrite aps ec2:CreateNetworkInterface ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:ModifyNetworkInterfaceAttribute ec2 eks:DeleteAccessEntry eks eks:DescribeCluster eks iam:DeleteRole iam