Policy: AmazonZocaloFullAccess ARN: arn:aws:iam::aws:policy/AmazonZocaloFullAccess Allowed Actions Actions Services ds:* ds ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSubnet ec2 ec2:CreateTags ec2 ec2:CreateVpc ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteSecurityGroup ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 zocalo:* zocalo