Policy: AmazonVPCReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonVPCReadOnlyAccess Allowed Actions Actions Services ec2:DescribeAccountAttributes ec2 ec2:DescribeAddresses ec2 ec2:DescribeCarrierGateways ec2 ec2:DescribeClassicLinkInstances ec2 ec2:DescribeCustomerGateways ec2 ec2:DescribeDhcpOptions ec2 ec2:DescribeEgressOnlyInternetGateways ec2 ec2:DescribeFlowLogs ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeLocalGatewayRouteTableVpcAssociations ec2 ec2:DescribeLocalGatewayRouteTables ec2 ec2:DescribeMovingAddresses ec2 ec2:DescribeNatGateways ec2 ec2:DescribeNetworkAcls ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfacePermissions ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribePrefixLists ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroupReferences ec2 ec2:DescribeSecurityGroupRules ec2 ec2:DescribeSecurityGroupVpcAssociations ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeStaleSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcClassicLink ec2 ec2:DescribeVpcClassicLinkDnsSupport ec2 ec2:DescribeVpcEndpointConnectionNotifications ec2 ec2:DescribeVpcEndpointConnections ec2 ec2:DescribeVpcEndpointServiceConfigurations ec2 ec2:DescribeVpcEndpointServicePermissions ec2 ec2:DescribeVpcEndpointServices ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcPeeringConnections ec2 ec2:DescribeVpcs ec2 ec2:DescribeVpnConnections ec2 ec2:DescribeVpnGateways ec2 ec2:GetSecurityGroupsForVpc ec2