Policy: AmazonRedshiftServiceLinkedRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonRedshiftServiceLinkedRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:AllocateAddress ec2 ec2:AssignIpv6Addresses ec2 ec2:AssociateAddress ec2 ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:CreateVpcEndpoint ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeAddresses ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeNetworkAcls ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroupRules ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:DisassociateAddress ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:ModifySecurityGroupRules ec2 ec2:ModifyVpcEndpoint ec2 ec2:ReleaseAddress ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 ec2:UnassignIpv6Addresses ec2 glue:GetCatalog glue glue:GetCatalogs glue lakeformation:GetDataAccess lakeformation logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:GetLogEvents logs logs:PutLogEvents logs logs:PutRetentionPolicy logs secretsmanager:DeleteSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:GetRandomPassword secretsmanager secretsmanager:PutSecretValue secretsmanager secretsmanager:RotateSecret secretsmanager secretsmanager:UpdateSecret secretsmanager secretsmanager:UpdateSecretVersionStage secretsmanager servicequotas:GetServiceQuota servicequotas