Policy: AWSCompromisedKeyQuarantine ARN: arn:aws:iam::aws:policy/AWSCompromisedKeyQuarantine Allowed Actions Actions Services ec2:RequestSpotInstances ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 iam:AttachGroupPolicy iam iam:AttachRolePolicy iam iam:AttachUserPolicy iam iam:ChangePassword iam iam:CreateAccessKey iam iam:CreateInstanceProfile iam iam:CreateLoginProfile iam iam:CreateRole iam iam:CreateUser iam iam:DetachUserPolicy iam iam:PutUserPermissionsBoundary iam iam:PutUserPolicy iam iam:UpdateAccessKey iam iam:UpdateAccountPasswordPolicy iam iam:UpdateUser iam lambda:CreateFunction lambda lightsail:Create* lightsail lightsail:Delete* lightsail lightsail:DownloadDefaultKeyPair lightsail lightsail:GetInstanceAccessDetails lightsail lightsail:Start* lightsail lightsail:Update* lightsail organizations:CreateAccount organizations organizations:CreateOrganization organizations organizations:InviteAccountToOrganization organizations