Policy: AmazonRDSCustomInstanceProfileRolePolicy ARN: arn:aws:iam::aws:policy/AmazonRDSCustomInstanceProfileRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:AssignPrivateIpAddresses ec2 ec2:CreateSnapshot ec2 ec2:CreateSnapshot ec2 ec2:CreateSnapshots ec2 ec2:CreateSnapshots ec2 ec2:CreateSnapshots ec2 ec2:CreateTags ec2 ec2:UnassignPrivateIpAddresses ec2 ec2messages:AcknowledgeMessage ec2messages ec2messages:DeleteMessage ec2messages ec2messages:FailMessage ec2messages ec2messages:GetEndpoint ec2messages ec2messages:GetMessages ec2messages ec2messages:SendReply ec2messages events:PutEvents events kms:Decrypt kms kms:Decrypt kms kms:GenerateDataKey kms kms:GenerateDataKey kms logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:PutLogEvents logs logs:PutRetentionPolicy logs s3:AbortMultipartUpload s3 s3:ListBucketMultipartUploads s3 s3:ListBucketVersions s3 s3:ListMultipartUploadParts s3 s3:getObject s3 s3:getObjectVersion s3 s3:putObject s3 secretsmanager:CreateSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:TagResource secretsmanager sqs:DeleteMessage sqs sqs:GetQueueUrl sqs sqs:ReceiveMessage sqs sqs:SendMessage sqs ssm:DescribeDocument ssm ssm:GetDocument ssm ssm:GetManifest ssm ssm:PutConfigurePackageResult ssm ssm:UpdateInstanceInformation ssm ssmmessages:CreateControlChannel ssmmessages ssmmessages:OpenControlChannel ssmmessages