Policy: AWSCloudHSMRole ARN: arn:aws:iam::aws:policy/service-role/AWSCloudHSMRole Allowed Actions Actions Services ec2:CreateNetworkInterface ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:DetachNetworkInterface ec2