Policy: AWSCloudMapFullAccess ARN: arn:aws:iam::aws:policy/AWSCloudMapFullAccess Allowed Actions Actions Services ec2:DescribeInstances ec2 ec2:DescribeRegions ec2 ec2:DescribeVpcs ec2 route53:ChangeResourceRecordSets route53 route53:CreateHealthCheck route53 route53:CreateHostedZone route53 route53:DeleteHealthCheck route53 route53:DeleteHostedZone route53 route53:GetHealthCheck route53 route53:GetHostedZone route53 route53:ListHostedZonesByName route53 route53:UpdateHealthCheck route53 servicediscovery:* servicediscovery