Policy: AWSApplicationMigrationFullAccess ARN: arn:aws:iam::aws:policy/AWSApplicationMigrationFullAccess Allowed Actions Actions Services drs:DescribeSourceServers drs drs:DisconnectSourceServer drs ec2:DescribeAccountAttributes ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeImages ec2 ec2:DescribeInstanceAttribute ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstanceTypeOfferings ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeKeyPairs ec2 ec2:DescribeLaunchTemplateVersions ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribePlacementGroups ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVolumes ec2 ec2:GetEbsDefaultKmsKeyId ec2 ec2:GetEbsEncryptionByDefault ec2 elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing iam:ListInstanceProfiles iam iam:PassRole iam kms:DescribeKey kms kms:ListAliases kms license-manager:ListLicenseConfigurations license-manager mgn:* mgn servicequotas:GetServiceQuota servicequotas ssm:DescribeDocument ssm ssm:DescribeInstanceInformation ssm ssm:DescribeParameters ssm ssm:GetAutomationExecution ssm ssm:GetCommandInvocation ssm ssm:GetDocument ssm ssm:GetParameter ssm ssm:GetParameters ssm ssm:ListCommandInvocations ssm ssm:ListCommands ssm ssm:PutParameter ssm ssm:SendCommand ssm ssm:SendCommand ssm ssm:StartAutomationExecution ssm