Policy: AmazonRedshiftFullAccess ARN: arn:aws:iam::aws:policy/AmazonRedshiftFullAccess Allowed Actions Actions Services cloudwatch:Describe* cloudwatch cloudwatch:DisableAlarmActions cloudwatch cloudwatch:EnableAlarmActions cloudwatch cloudwatch:Get* cloudwatch cloudwatch:List* cloudwatch cloudwatch:PutMetricAlarm cloudwatch ec2:DescribeAccountAttributes ec2 ec2:DescribeAddresses ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 iam:CreateServiceLinkedRole iam redshift:* redshift redshift-data:CancelStatement redshift-data redshift-data:DescribeStatement redshift-data redshift-data:DescribeTable redshift-data redshift-data:ExecuteStatement redshift-data redshift-data:GetStatementResult redshift-data redshift-data:ListDatabases redshift-data redshift-data:ListSchemas redshift-data redshift-data:ListStatements redshift-data redshift-data:ListTables redshift-data redshift-serverless:* redshift-serverless secretsmanager:CreateSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:ListSecrets secretsmanager secretsmanager:TagResource secretsmanager sns:CreateTopic sns sns:Get* sns sns:List* sns tag:GetResources tag tag:GetTagKeys tag tag:GetTagValues tag tag:TagResources tag tag:UntagResources tag