Policy: AWSCloud9ServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSCloud9ServiceRolePolicy Allowed Actions Actions Services cloudformation:CreateStack cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackResources cloudformation cloudformation:DescribeStacks cloudformation ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:DeleteSecurityGroup ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstances ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 iam:GetInstanceProfile iam iam:ListInstanceProfiles iam iam:PassRole iam