Policy: AmazonWorkSpacesWebServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonWorkSpacesWebServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:AssociateAddress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterface ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:DisassociateAddress ec2 kinesis:DescribeStreamSummary kinesis kinesis:PutRecord kinesis kinesis:PutRecords kinesis