Policy: APIGatewayServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/APIGatewayServiceRolePolicy Allowed Actions Actions Services acm:DescribeCertificate acm acm:GetCertificate acm ec2:AssignPrivateIpAddresses ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteNetworkInterfacePermission ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfacePermissions ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:UnassignPrivateIpAddresses ec2 elasticloadbalancing:AddListenerCertificates elasticloadbalancing elasticloadbalancing:DescribeListeners elasticloadbalancing elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing elasticloadbalancing:ModifyListener elasticloadbalancing elasticloadbalancing:RemoveListenerCertificates elasticloadbalancing firehose:DescribeDeliveryStream firehose firehose:PutRecord firehose firehose:PutRecordBatch firehose logs:CreateLogDelivery logs logs:DeleteLogDelivery logs logs:GetLogDelivery logs logs:ListLogDeliveries logs logs:UpdateLogDelivery logs servicediscovery:DiscoverInstances servicediscovery servicediscovery:GetNamespace servicediscovery servicediscovery:GetService servicediscovery xray:GetSamplingRules xray xray:GetSamplingTargets xray xray:PutTelemetryRecords xray xray:PutTraceSegments xray