Policy: AWSApplicationMigrationServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSApplicationMigrationServiceRolePolicy Allowed Actions Actions Services ec2:AttachVolume ec2 ec2:AttachVolume ec2 ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateLaunchTemplate ec2 ec2:CreateLaunchTemplateVersion ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSnapshot ec2 ec2:CreateSnapshot ec2 ec2:CreateTags ec2 ec2:CreateVolume ec2 ec2:CreateVolume ec2 ec2:DeleteLaunchTemplate ec2 ec2:DeleteLaunchTemplateVersions ec2 ec2:DeleteSnapshot ec2 ec2:DeleteVolume ec2 ec2:DeregisterImage ec2 ec2:DescribeAccountAttributes ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeImages ec2 ec2:DescribeInstanceAttribute ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeLaunchTemplateVersions ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeVolumes ec2 ec2:DetachVolume ec2 ec2:DetachVolume ec2 ec2:GetConsoleOutput ec2 ec2:GetConsoleScreenshot ec2 ec2:GetEbsDefaultKmsKeyId ec2 ec2:GetEbsEncryptionByDefault ec2 ec2:ModifyInstanceAttribute ec2 ec2:ModifyLaunchTemplate ec2 ec2:RegisterImage ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 iam:PassRole iam kms:ListRetirableGrants kms mgh:AssociateCreatedArtifact mgh mgh:CreateProgressUpdateStream mgh mgh:DisassociateCreatedArtifact mgh mgh:GetHomeRegion mgh mgh:ImportMigrationTask mgh mgh:NotifyMigrationTaskState mgh mgh:PutResourceAttributes mgh mgn:ListTagsForResource mgn organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListDelegatedAdministrators organizations